[Bug 1310092] Review Request: cryptobone - Secure Communication Under Your Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1310092



--- Comment #4 from Ralf Senderek <fedora@xxxxxxxxxxx> ---
(In reply to Richard Shaw from comment #1)
> Here's a quick spec file review:

> - Why x86_64 only?

Richard, 

thank you for your spec file review. 

The permission issues you found may require a re-organisation of the
installation process (%make_install) and a change of the source code. 
I'm working on this.

Let me explain why some of these decisions are important for the cryptobone
package.

The numerous (not-standard) file permissions follow from the necessity to 
restrict the use of the crypto bone to the root user. Also the location in
/usr/lib where secrets are held is essential, because it is checked by the
binaries that use them, in particular the cryobone daemon. 

For now, I decided to only prepare a tar archive of the newly build software
that does not install but contains everything needed. And I did the fiddly work
in the spec file. I'm now trying to put as much as possible back into the 
"make install" in the source code that would clean up the spec file.

> - Why x86_64 only?

Well, in principle, this system should work on all architectures. But I decided 
to restrict it to x86_64 at the moment, because the full testing cycle on an
arch is quite expensive and I don't have access to all other arches to test the
final result there. For a security-critical system like the cryptobone it is 
indispensable to run these tests manually, and I simply cannot do this alone.
It should be possible to expand the scope to i386 or arm but I don't see me
testing
ppc and co. So let me stick to this restriction for the moment. 

I'll post new spec file and SRPM later.

Ralf.
~

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review




[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]