me
/
guix
Archived
1
0
Fork 0
This repository has been archived on 2024-08-07. You can view files and clone it, but cannot push or open issues/pull-requests.
guix/doc
Ludovic Courtès 73b3f941d7
maint: Suggest ‘guix git authenticate’ for initial authentication.
The previous recommendation, running ‘make authenticate’, was insecure
because it led users to run code from the very repository they want to
authenticate:

  https://lists.gnu.org/archive/html/guix-devel/2024-04/msg00252.html

* Makefile.am (commit_v1_0_0, channel_intro_commit)
(channel_intro_signer, GUIX_GIT_KEYRING, authenticate): Remove.
* Makefile.am (.git/hooks/%): New target, generalization of previous
‘.git/hooks/pre-push’ target.
(nodist_noinst_DATA): Add ‘.git/hooks/post-merge’.
* doc/contributing.texi (Building from Git): Suggest ‘guix git
authenticate’ instead of ‘make authenticate’.
* etc/git/post-merge: New file.
* etc/git/pre-push: Run ‘guix git authenticate’ instead of ‘make
authenticate’.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Reported-by: Skyler Ferris <skyvine@protonmail.com>
Change-Id: Ia415aa8375013d0dd095e891116f6ce841d93efd
2024-05-25 16:23:56 +02:00
..
images doc: Use "dejavu sans" instead of "Helvetica" or "sans" in dot images. 2024-04-14 10:29:07 +02:00
build.scm nls: Update translations. 2024-04-01 14:09:20 +02:00
contributing.texi maint: Suggest ‘guix git authenticate’ for initial authentication. 2024-05-25 16:23:56 +02:00
environment-gdb.scm doc: Update GDB "guix shell" example to use autoconf-2.69 2023-07-18 00:41:15 +02:00
fdl-1.3.texi
guix-cookbook.texi doc: cookbook: Fix overlong lines. 2024-05-19 19:09:40 +02:00
guix.texi doc: Document ‘assume-valid-file-name’ in ‘local-file’. 2024-05-25 16:19:22 +02:00
he-config-bare-bones.scm doc: Update example of a minimalistic home environment. 2022-06-10 22:42:49 +02:00
htmlxref.cnf nls: Update translations. 2024-04-01 14:09:20 +02:00
local.mk Revert "maint: Generate 'doc/version.texi' reproducibly." 2024-04-19 16:45:41 +02:00
package-hello.json import: Do not return package name with json importer. 2024-02-23 19:02:55 +01:00
package-hello.scm