me
/
guix
Archived
1
0
Fork 0
This repository has been archived on 2024-08-07. You can view files and clone it, but cannot push or open issues/pull-requests.
guix/etc
Ludovic Courtès 73b3f941d7
maint: Suggest ‘guix git authenticate’ for initial authentication.
The previous recommendation, running ‘make authenticate’, was insecure
because it led users to run code from the very repository they want to
authenticate:

  https://lists.gnu.org/archive/html/guix-devel/2024-04/msg00252.html

* Makefile.am (commit_v1_0_0, channel_intro_commit)
(channel_intro_signer, GUIX_GIT_KEYRING, authenticate): Remove.
* Makefile.am (.git/hooks/%): New target, generalization of previous
‘.git/hooks/pre-push’ target.
(nodist_noinst_DATA): Add ‘.git/hooks/post-merge’.
* doc/contributing.texi (Building from Git): Suggest ‘guix git
authenticate’ instead of ‘make authenticate’.
* etc/git/post-merge: New file.
* etc/git/pre-push: Run ‘guix git authenticate’ instead of ‘make
authenticate’.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Reported-by: Skyler Ferris <skyvine@protonmail.com>
Change-Id: Ia415aa8375013d0dd095e891116f6ce841d93efd
2024-05-25 16:23:56 +02:00
..
completion bash completion: Complete ‘guix style -f’ with files. 2023-12-10 01:00:00 +01:00
git maint: Suggest ‘guix git authenticate’ for initial authentication. 2024-05-25 16:23:56 +02:00
init.d guix-install.sh: Prompt for configuring substitutes discovery. 2021-07-07 23:54:20 -04:00
openrc guix-install.sh: Prompt for configuring substitutes discovery. 2021-07-07 23:54:20 -04:00
snippets build-system: Add zig-build-system. 2023-10-21 00:27:25 +02:00
substitutes
teams teams: qt: Remove erroneous comment at top of scripts. 2024-03-19 03:40:08 -04:00
committer.scm.in etc/committer: Speed up surrounding-sexp. 2023-09-24 13:49:53 +02:00
copyright.el
disarchive-manifest.scm gnu: disarchive: Update to 0.6.0. 2024-02-12 21:26:01 -06:00
gnu-store.mount.in
guix-daemon.cil.in etc: SELinux: Update policy file. 2023-05-25 12:51:15 +02:00
guix-daemon.conf.in guix-install.sh: Prompt for configuring substitutes discovery. 2021-07-07 23:54:20 -04:00
guix-daemon.service.in etc: systemd services: switch to "journal" for output and error logging. 2024-03-11 14:34:25 -07:00
guix-gc.service.in etc: Add systemd files for running ‘guix gc’ periodically 2021-09-20 14:18:21 +00:00
guix-gc.timer etc: Add systemd files for running ‘guix gc’ periodically 2021-09-20 14:18:21 +00:00
guix-install.sh guix-install.sh: Fix setting GUIX_LOCPATH. 2024-04-29 22:56:44 +02:00
guix-publish.conf.in
guix-publish.service.in etc: systemd services: switch to "journal" for output and error logging. 2024-03-11 14:34:25 -07:00
historical-authorizations
hurd-manifest.scm maint: Build more development packages for GNU/Hurd. 2023-12-18 23:16:28 +01:00
kernels-manifest.scm maint: Add missing modules to the kernel manifest. 2023-01-06 00:16:06 -05:00
news.scm news: Add entry for ‘guix git authenticate’ changes. 2024-05-01 17:48:24 +02:00
release-manifest.scm maint: Add icecat to the release manifest. 2023-03-30 11:14:53 +02:00
source-manifest.scm etc: Add 'source-manifest.scm'. 2021-09-14 11:50:58 +02:00
system-tests.scm build-system: Add 'channel-build-system'. 2022-08-09 15:16:06 +02:00
teams.scm teams: Add Maxim to documentation team. 2024-05-15 22:55:21 -04:00
time-travel-manifest.scm time-travel-manifest: Uncomment all the past releases. 2024-03-10 15:53:56 +01:00