Date: Fri, 12 May 2000 18:07:24 -0600 From: Wes Peters <wes@softweyr.com> To: Patrick Bihan-Faou <patrick@mindstep.com> Cc: freebsd-security@FreeBSD.ORG Subject: Re: New packaging tool (was Re: Applying patches with out a compiler) Message-ID: <391C9CBC.4E0ED8E5@softweyr.com> References: <Pine.NEB.3.96L.1000512123717.44824A-100000@fledge.watson.org> <E12qJVg-0005ow-00@xi.css.qmw.ac.uk> <107101bfbc60$aabeb350$040aa8c0@local.mindstep.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Patrick Bihan-Faou wrote:
>
> Hi,
>
> I am currently working on a new version of pkg_*, which will bring a few
> features that I feel are missing.
Go back and read the message I wrote at the bottom of my first, big
message on this subject, then talk to Jordan Hubbard <jkh@freebsd.org>
before you get too deep into it. As I wrote before, it would be
wasteful to do a lot of work on yet another new packaging system when
it might be possible to build a foundation for what he wants in the
future.
In my opinion, if we're going to replace the packaging system completely,
a good starting point might be to turn the PAX code, or something of
that nature, into a library and build on top of that.
The package-signing code I've produced uses the code already existing
in OpenBSD 2.6, and places signatures between the gzip header and gzip
compressed data. It's a clever use, and works quite well, because you
only have to sign the compressed data, and don't have to worry about
getting the gzip header or signature signed.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters Softweyr LLC
wes@softweyr.com http://softweyr.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?391C9CBC.4E0ED8E5>