Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] mandatory / automatic source verification

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Thomas Orgis <thomas-forum AT orgis.org>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: [SM-Discuss] mandatory / automatic source verification
  • Date: Mon, 2 Jun 2008 14:43:43 +0200

Hi again...

just a note about our source verification: I just updated the mksh spell
which has a special source archive format (cpio.gz) which we don't have a
handler for.
The spell creator made a PRE_BUILD that contains the line to unpack the
archive... it was missing default_pre_build, and thus missing any source
verification!
That rang a little, but loud, bell inside my head: Shouldn't source
verification be a mandatory step _before_ PRE_BUILD?

Of course the best solution for this specific problem would be to add cpio.gz
unpacking to sorcery, but the general question remains if it should be that
easy to (accidentally) circumvent the source authenticity checks.

Again, opinions?


Alrighty then,

Thomas.

Attachment: signature.asc
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page