From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id qBYCIeFGzV75TQAA0tVLHw (envelope-from ) for ; Tue, 26 May 2020 16:42:09 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id yOcZHeFGzV5lJAAA1q6Kng (envelope-from ) for ; Tue, 26 May 2020 16:42:09 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E76DC940B2B for ; Tue, 26 May 2020 16:42:08 +0000 (UTC) Received: from localhost ([::1]:42678 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jdceV-0003x9-Ol for larch@yhetil.org; Tue, 26 May 2020 12:42:07 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40464) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jdceI-0003vc-Ea for guix-devel@gnu.org; Tue, 26 May 2020 12:41:54 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:60263) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jdceH-0002Ll-59; Tue, 26 May 2020 12:41:54 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 7D42A5C0134; Tue, 26 May 2020 12:41:51 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Tue, 26 May 2020 12:41:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=19ZXIO0acCFsoRMCIHFQoRLo g/Sw5c8r1JCkiB7grI0=; b=tGAjqfMtrUJgG070n0avWJSR1qT7uYPlPEuvxVSg i5NkrnaPhXVSRTkrzYCSCyG04ZVZMiHNIyzVhjvJEK6iWU0mZEWeTC5MBbteEJV4 gjggqAIPqG54BJM8Adx2X+FkpCjrj/24mapurb+e3oPOYLY3YVLsDO6848FyWolp Ppk= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=19ZXIO 0acCFsoRMCIHFQoRLog/Sw5c8r1JCkiB7grI0=; b=vBpK0u2pECaVolQyBXa/tT BEVKc/TJCe2KG51pR2NsKBvokb8SfdJ5FpclBrdL0J5BOeoNRE6/ozHPEAkKcG48 mr6jKDkn06Ox/CCrFBpfopf3uOUBLKFyApINlHAbz4mH2/0jicAPX7by4FnTpvNs 61+RsrQM/QhkXBa4rsW2JuWoPKuXTsiiW83YkaBIVGyWNCxfvRknmOIKriaKXIjG JmXtmF/WoPSEO1GlWnoTyzoEH6GHgtEPUdLvX26s3vp4uOPzgOdodPUhkP2L0L3a oiwxk2PYfrNrJy+ibbWgnydDLrz9YwF8jXJbop8Y692YCHht2ln8gEdbRvR3gjmw == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduhedruddvvddguddtvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggujgesghdtreertddtvdenucfhrhhomhepnfgvohcu hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth htvghrnhepudekveegteekleetgfeitdejgfejkeffudethedvhfeukeduleeikeejfeeh ffetnecukfhppeejiedruddvgedrudefkedrieefnecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (c-76-124-138-63.hsd1.pa.comcast.net [76.124.138.63]) by mail.messagingengine.com (Postfix) with ESMTPA id D677A30665D1; Tue, 26 May 2020 12:41:50 -0400 (EDT) Date: Tue, 26 May 2020 12:41:47 -0400 From: Leo Famulari To: Vagrant Cascadian Subject: Re: Updating the =?utf-8?B?4oCccHJlLXB1?= =?utf-8?B?c2jigJ0=?= Git hook Message-ID: <20200526164147.GB21828@jasmine.lan> References: <87imgn8zsv.fsf@gnu.org> <20200524064115.GC858@E5400> <878shhxb0h.fsf@gnu.org> <87pnar22oz.fsf@yucca> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="d6Gm4EdcadzBjdND" Content-Disposition: inline In-Reply-To: <87pnar22oz.fsf@yucca> Received-SPF: pass client-ip=66.111.4.27; envelope-from=leo@famulari.name; helo=out3-smtp.messagingengine.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/26 12:41:51 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Guix Devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=famulari.name header.s=mesmtp header.b=tGAjqfMt; dkim=fail (rsa verify failed) header.d=messagingengine.com header.s=fm2 header.b=vBpK0u2p; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Spam-Score: -2.11 X-TUID: +7l6ejakrsTk --d6Gm4EdcadzBjdND Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, May 25, 2020 at 01:13:16PM -0700, Vagrant Cascadian wrote: > Wait a minute... you're saying this is something that needs to be > configured on each committer's machine(s)? Yes, it was recommended in HACKING and then, after we removed that file, in the Commit Access section of the manual. We try to remind new committers to read these files but maybe we forgot for you. However, the security model does not depend on either it or on a post-receive server hook. It's simply to prevent mistakes. There are commits in the repo that are unsigned when they should have been signed, and even one commit that is signed but that fails the signature check :/ A simple pre-push hook would have caught that. --d6Gm4EdcadzBjdND Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAl7NRscACgkQJkb6MLrK fwjBIQ/9EKVtbWkZjxN0zgq5hfAzGWpCoB5jzccAw9akMi3E3qOD3YFldh8hYpQb JC22z+i1xRl55tmWZ0KOvNrCdwgXmFbamTBEtzQaxVl73OxR5UNDy4UzXWKGQMmA 8SV+xsvHn0d4NE95a7oiVMckf4NCmY17b0ZVIZk25M5radYiaIBU/8BUp+AH5Y3j ALK8Lehu7iO0mUebc6BO0/Cu7FGQnuV+I2GzidfrUBoL0eRQafwsBH3NflZ4YU54 kNjdF6J+EtTGIohCu7frUBK+PP57LbAOi72nZP95ZDQuuslt4BoMJgq0wGK6GvmZ fQjhLM7S1dcBRRs6pqXgTwK8mxPn87+4Bm7Nks7HI1pkhL43Xmy2OWee/HTuN8oj r9A93SpqPut5cDnBt7yO8/cUt8MXuY1vy1ekG5mRNwWzNUHC/EcswNmwzEKqN8lv VLDtOc78fpKEoYmnEvJwKnAMxrhIcFbJ9ymBpa0j9pnMxNVeNxChPzDqfeEkPMua tW/JFGoM2kVzTuD95CWh906l25McJA/D9BrV53M8RnPxo9waQQMUMXAn7/SLtLDQ pEveIFanqSCSsRW7yfi3sJxHEy8SzK5S3KrR5IUHLNw9igGNGsjQJmQi/Rqlrk6s 1G23rIU3RZOiORZMByj+uPUcdGiWa4cevcrBKkDWnHoZfjfoy7I= =c+0F -----END PGP SIGNATURE----- --d6Gm4EdcadzBjdND--