Ciaran McCreesh wrote:
> On Mon, 23 May 2005 13:11:09 -0400 Mike Pagano <[EMAIL PROTECTED]>
> wrote:
> | When a non-dev submits a snapshot ebuild to bugzilla  what is the
> | proper method of providing access to the snapshot I created myself
> | that it installs.
> 
> Well... I refuse to take user-submitted tarballs for security reasons.
> Instead, you should give the command used to create said tarball --
> use the svn revision id (or whatever) rather than HEAD when doing this.
> Dunno if other devs are equally untrusting... They probably should be...
> 

I may add that I'd try to get and upstream-submitted tarball (preferably
checksummed). Lots of repositories build daily-snapshots so chances are
good to get one.

-- 
gentoo-dev@gentoo.org mailing list

Reply via email to