From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: =?UTF-8?Q?Re=3A_OpenSSL_=E2=80=9CDROWN=E2=80=9D_vulnerability_=26_grafts?= Date: Wed, 02 Mar 2016 18:00:10 +0000 Message-ID: References: <87twkpnbk0.fsf@gnu.org> <877fhkg7yf.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a113b00b4b93253052d14a750 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49714) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1abB4R-0002o6-L6 for guix-devel@gnu.org; Wed, 02 Mar 2016 13:00:29 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1abB4Q-0001jU-OL for guix-devel@gnu.org; Wed, 02 Mar 2016 13:00:23 -0500 In-Reply-To: <877fhkg7yf.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= , guix-devel --001a113b00b4b93253052d14a750 Content-Type: text/plain; charset=UTF-8 That was a very clear and informative read. I appreciate your style of writing, with links to relevant docs. Thank you! One thing is still not clear to me about grafts. While you are using a graft, is it possible the binaries you build will be different from those built by someone not using the graft? If so, is that a problem, or is there a reason that it isn't a problem (perhaps because guix will reject binaries whose hash is different than expected, or something like that)? - Chris > > --001a113b00b4b93253052d14a750 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable That was a very clear and informative read. I appreciate your style of writ= ing, with links to relevant docs. Thank you!

One thing i= s still not clear to me about grafts. While you are using a graft, is it po= ssible the binaries you build will be different from those built by someone= not using the graft? If so, is that a problem, or is there a reason that i= t isn't a problem (perhaps because guix will reject binaries whose hash= is different than expected, or something like that)?

<= div>- Chris



--001a113b00b4b93253052d14a750--