| 1 | GLEP: 14 |
1 | GLEP: 14 |
| 2 | Title: security updates based on GLSA |
2 | Title: security updates based on GLSA |
| 3 | Version: $Revision: 1.3 $ |
3 | Version: $Revision: 1.4 $ |
| 4 | Last-Modified: $Date: 2003/08/24 22:11:46 $ |
4 | Last-Modified: $Date: 2003/11/10 19:21:57 $ |
| 5 | Author: Marius Mauch <genone@genone.de>, |
5 | Author: Marius Mauch <genone@genone.de>, |
| 6 | Status: Draft |
6 | Status: Accepted |
| 7 | Type: Standards Track |
7 | Type: Standards Track |
| 8 | Content-Type: text/x-rst |
8 | Content-Type: text/x-rst |
| 9 | Created: 18 Aug 2003 |
9 | Created: 18 Aug 2003 |
| 10 | Post-History: 22-Aug-2003, 24-Aug-2003 |
10 | Post-History: 22-Aug-2003, 24-Aug-2003, 10-Nov-2003 |
| 11 | |
11 | |
| 12 | |
12 | |
| 13 | Abstract |
13 | Abstract |
| 14 | ======== |
14 | ======== |
| 15 | |
15 | |
| … | |
… | |
| 50 | ----------- |
50 | ----------- |
| 51 | |
51 | |
| 52 | The GLSA format needs to be specified, I suggest using XML for that to simplify |
52 | The GLSA format needs to be specified, I suggest using XML for that to simplify |
| 53 | parsing and later extensions. See `implementation`_ for a sample DTD. The format |
53 | parsing and later extensions. See `implementation`_ for a sample DTD. The format |
| 54 | has to be compatible with the update tool of course. If necessary a converter |
54 | has to be compatible with the update tool of course. If necessary a converter |
| 55 | tool or an editor could be written for people not comfortable with XML. |
55 | tool or an editor could be written for people not comfortable with XML (update: |
| 56 | Every GLSA has to be GPG signed by the responsible developer, who has to be |
56 | a QT based editor for the GLSA format written by plasmaroo exists in the |
| 57 | a member of the security herd. |
57 | gentoo-projects repository). Every GLSA has to be GPG signed by the responsible |
|
|
58 | developer, who has to be a member of the security herd. |
| 58 | |
59 | |
| 59 | |
60 | |
| 60 | GLSA release process |
61 | GLSA release process |
| 61 | -------------------- |
62 | -------------------- |
| 62 | |
63 | |
| … | |
… | |
| 65 | be used to release a GLSA that will: |
66 | be used to release a GLSA that will: |
| 66 | |
67 | |
| 67 | - check the GLSA for correctness |
68 | - check the GLSA for correctness |
| 68 | - sign the GLSA with the developers GPG key |
69 | - sign the GLSA with the developers GPG key |
| 69 | - send a mail to gentoo-announce with the XML GLSA and a plaintext version attached |
70 | - send a mail to gentoo-announce with the XML GLSA and a plaintext version attached |
| 70 | - upload it to www.gentoo.org/glsa (or wherever they should be uploaded) |
71 | - upload it to www.gentoo.org/security/en/glsa (via cvs commit) |
| 71 | - put it on the rsync server |
72 | - put it on the rsync server (via cvs commit) |
| 72 | - notify the moderators on the forums to make an announcement |
73 | - notify the moderators on the forums to make an announcement |
| 73 | |
74 | |
| 74 | |
75 | |
| 75 | Portage changes |
76 | Portage changes |
| 76 | --------------- |
77 | --------------- |
| … | |
… | |
| 108 | |
109 | |
| 109 | Implementation |
110 | Implementation |
| 110 | ============== |
111 | ============== |
| 111 | |
112 | |
| 112 | A prototype implementation (including the update tool, a DTD and a sample |
113 | A prototype implementation (including the update tool, a DTD and a sample |
| 113 | XMLified GLSA) exists at http://gentoo.devel-net.org/glsa/ . This GLEP is based |
114 | XMLified GLSA) exists at http://gentoo.devel-net.org/glsa/ and in the |
|
|
115 | gentoo-projects/gentoo-security/GLSA repository. This GLEP is based |
| 114 | on that implementation, though it can be changed or rewritten if necessary. |
116 | on that implementation, though it can be changed or rewritten if necessary. |
| 115 | According to portage developers there is also already some support for this in |
|
|
| 116 | portage. |
|
|
| 117 | |
117 | |
| 118 | |
118 | |
| 119 | Backwards compatibility |
119 | Backwards compatibility |
| 120 | ======================= |
120 | ======================= |
| 121 | |
121 | |
Parent Directory
| 
Revision Log
| 
Patch