Closes: https://bugs.gentoo.org/850415
Reported-by: Joonas Niilola
Signed-off-by: Florian Schmaus
---
eclass/java-vm-2.eclass | 5 +
1 file changed, 5 insertions(+)
diff --git a/eclass/java-vm-2.eclass b/eclass/java-vm-2.eclass
index 7c63e63fad76..c0aea3e9ea4a 100644
--- a/eclass/java-vm-2.
On 08.06.22 22:42, Robin H. Johnson wrote:
EGO_SUM vs dependency tarballs:
[..]
- EGO_SUM is verifiable/reproducible from Upstream Go systems
Let's be explicit, there is a _security_ threat here: as a user of an
ebuild, dependency tarballs now take effort in manual review just to
confirm that t
On Thu, Jun 09, 2022 at 07:49:04PM +0200, Sebastian Pipping wrote:
> On 08.06.22 22:42, Robin H. Johnson wrote:
> > EGO_SUM vs dependency tarballs:
> > [..]
> > - EGO_SUM is verifiable/reproducible from Upstream Go systems
>
> Let's be explicit, there is a _security_ threat here: as a user of an
>
The eclass code in distutils-r1_python_install makes some assumptions
specific to _distutils-r1_post_python_compile being called,
and scriptdir not being modified since. Make them more explicit by:
1) explicitly removing the files that we expect to have been created,
2) verifying that both the c
Warn if python_foreach_impl is called directly from within a phase
function that is already covered by a distutils-r1 sub-phase.
Signed-off-by: Michał Górny
---
eclass/distutils-r1.eclass | 1 +
eclass/python-r1.eclass| 18 ++
2 files changed, 19 insertions(+)
diff --git a/
The Linux kernel supports the compression of modules utilizing GZIP, XZ
and ZSTD. Add code into linux-mod.eclass to support this for out of
tree modules utilizing the compression binary specified in the kernel
config.
Note that if the binary which provides the compression is not present on
the s
