From: Pierre Neidhardt <mail@ambrevar.xyz>
To: 41907@debbugs.gnu.org
Subject: bug#41907: [security] Substitutes fetched from server with no authorized key
Date: Wed, 17 Jun 2020 09:37:35 +0200 [thread overview]
Message-ID: <87k106nnwg.fsf@ambrevar.xyz> (raw)
[-- Attachment #1: Type: text/plain, Size: 674 bytes --]
I could be doing something wrong, but...
1. Alice starts `guix publich -u ambrevar`.
2. Bob, who did _not_ authorize Alice's signing key:
- herd stop guix-daemon
- guix-daemon --build-users-grouop=guixbuild --substitute-urls='http://10.0.0.4:8080 https://ci.guix.gnu.org'
- guix build curl
Result:
--8<---------------cut here---------------start------------->8---
downloading from http://10.0.0.4:8080/nar/gzip/...
--8<---------------cut here---------------end--------------->8---
Guix commit 8b00728144d0e4bbc740e1595c85f0ecee3f6fb0.
Am I missing something or there is something really wrong?
--
Pierre Neidhardt
https://ambrevar.xyz/
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]
next reply other threads:[~2020-06-17 7:43 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-06-17 7:37 Pierre Neidhardt [this message]
2020-06-17 11:05 ` bug#41907: [security] Substitutes fetched from server with no authorized key Julien Lepiller
2020-06-17 11:51 ` Pierre Neidhardt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87k106nnwg.fsf@ambrevar.xyz \
--to=mail@ambrevar.xyz \
--cc=41907@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).