From owner-freebsd-security Fri May 12 17: 6:34 2000 Delivered-To: freebsd-security@freebsd.org Received: from obie.softweyr.com (obie.softweyr.com [204.68.178.33]) by hub.freebsd.org (Postfix) with ESMTP id 3137637BD77 for ; Fri, 12 May 2000 17:06:23 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from softweyr.com (ip43.salt-lake-city6.ut.pub-ip.psi.net [38.27.95.43]) by obie.softweyr.com (8.8.8/8.8.8) with ESMTP id SAA00693; Fri, 12 May 2000 18:06:03 -0600 (MDT) (envelope-from wes@softweyr.com) Message-ID: <391C9CBC.4E0ED8E5@softweyr.com> Date: Fri, 12 May 2000 18:07:24 -0600 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 4.0-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: Patrick Bihan-Faou Cc: freebsd-security@FreeBSD.ORG Subject: Re: New packaging tool (was Re: Applying patches with out a compiler) References: <107101bfbc60$aabeb350$040aa8c0@local.mindstep.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Patrick Bihan-Faou wrote: > > Hi, > > I am currently working on a new version of pkg_*, which will bring a few > features that I feel are missing. Go back and read the message I wrote at the bottom of my first, big message on this subject, then talk to Jordan Hubbard before you get too deep into it. As I wrote before, it would be wasteful to do a lot of work on yet another new packaging system when it might be possible to build a foundation for what he wants in the future. In my opinion, if we're going to replace the packaging system completely, a good starting point might be to turn the PAX code, or something of that nature, into a library and build on top of that. The package-signing code I've produced uses the code already existing in OpenBSD 2.6, and places signatures between the gzip header and gzip compressed data. It's a clever use, and works quite well, because you only have to sign the compressed data, and don't have to worry about getting the gzip header or signature signed. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC wes@softweyr.com http://softweyr.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message