guix-patches
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug#57910] [PATCH] Add link to 'pre-inst-env' from 'installing from git


From: Ludovic Courtès
Subject: [bug#57910] [PATCH] Add link to 'pre-inst-env' from 'installing from git' docs
Date: Sun, 25 Sep 2022 22:05:59 +0200
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux)

Hi,

Maxime Devos <maximedevos@telenet.be> skribis:

> While ordinarily, it is true that "make authenticate" runs "guix git
> authenticate" (and not ./pre-inst-env guix git authenticate), an
> attacker could have modified Makefile.am to _not_ call "guix git
> authenticate", as I've explained in the paragraph above the one you
> quoted:

Oh you’re right; sorry for overlooking this.

So yes, that calls for recommending the full ‘guix git authenticate’
command for the initial checkout.

Thanks,
Ludo’.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]