[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#57910] [PATCH] Add link to 'pre-inst-env' from 'installing from git
From: |
Ludovic Courtès |
Subject: |
[bug#57910] [PATCH] Add link to 'pre-inst-env' from 'installing from git' docs |
Date: |
Sun, 25 Sep 2022 22:05:59 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) |
Hi,
Maxime Devos <maximedevos@telenet.be> skribis:
> While ordinarily, it is true that "make authenticate" runs "guix git
> authenticate" (and not ./pre-inst-env guix git authenticate), an
> attacker could have modified Makefile.am to _not_ call "guix git
> authenticate", as I've explained in the paragraph above the one you
> quoted:
Oh you’re right; sorry for overlooking this.
So yes, that calls for recommending the full ‘guix git authenticate’
command for the initial checkout.
Thanks,
Ludo’.
bug#57909: Sorry - accidentally opened duplicate issues, Emma Turner, 2022/09/19