From: "Emil R. Petersen" <erp@movis.dk>
To: openembedded-devel@lists.openembedded.org
Subject: Re: [meta-webserver] cherokee: fix SRC_URI
Date: Thu, 05 Sep 2013 14:04:23 +0200 [thread overview]
Message-ID: <52287347.7050808@movis.dk> (raw)
In-Reply-To: <1378382068-24795-1-git-send-email-javier.viguera@digi.com>
I can see that this is hosted on a University website, but is there a
policy for using non-official mirrors?
This seems like it opens up a lot of potential security problems IMO.
Not only could the third-party mirror be easy to compromise, but how
would be assure we don't use a malicious mirror? Or that a malicious
contributer doesn't add a deliberatively tainted mirror?
In short, is there some sort of policy on when and how we use
third-party mirrors? Is security considerations part of the policy?
Kind Regards,
Emil Petersen
On 05/09/13 13:54, Javier Viguera wrote:
> The package is no longer available in the official cherokee site,
> so download it from a mirror.
>
> Signed-off-by: Javier Viguera<javier.viguera@digi.com>
> ---
>
> Notes:
> To be cherry-picked to Dylan as well.
>
> meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb b/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb
> index 265e24e..4b2d68d 100644
> --- a/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb
> +++ b/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb
> @@ -9,7 +9,7 @@ PR = "r9"
>
> DEPENDS = "libpcre openssl mysql5 ${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
>
> -SRC_URI = "http://www.cherokee-project.com/download/1.2/${PV}/cherokee-${PV}.tar.gz \
> +SRC_URI = "ftp://ftp.osuosl.org/.1/cherokee/1.2/${PV}/cherokee-${PV}.tar.gz \
> file://cherokee.init \
> file://cherokee.service \
> "
> _______________________________________________
> Openembedded-devel mailing list
> Openembedded-devel@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel
next prev parent reply other threads:[~2013-09-05 12:04 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-09-05 11:54 [meta-webserver] cherokee: fix SRC_URI Javier Viguera
2013-09-05 12:04 ` Emil R. Petersen [this message]
2013-09-05 12:15 ` Paul Eggleton
2013-09-05 12:09 ` Eric Bénard
2013-09-05 12:09 ` Emil R. Petersen
2013-09-05 12:21 ` Javier Viguera
2013-09-05 12:45 ` Eric Bénard
2013-09-05 12:46 ` Martin Jansa
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52287347.7050808@movis.dk \
--to=erp@movis.dk \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.