From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from clobix.com (mail.clobix.com [54.229.118.53]) by mail.openembedded.org (Postfix) with ESMTP id 8866060F1B for ; Thu, 5 Sep 2013 12:04:54 +0000 (UTC) Received: (qmail 6748 invoked by uid 89); 5 Sep 2013 12:04:44 -0000 Received: from unknown (HELO ?10.0.0.129?) (erp@movis.dk@::ffff:83.93.56.101) by 0 with ESMTPA; 5 Sep 2013 12:04:44 -0000 Message-ID: <52287347.7050808@movis.dk> Date: Thu, 05 Sep 2013 14:04:23 +0200 From: "Emil R. Petersen" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.12) Gecko/20130116 Icedove/10.0.12 MIME-Version: 1.0 To: openembedded-devel@lists.openembedded.org References: <1378382068-24795-1-git-send-email-javier.viguera@digi.com> In-Reply-To: <1378382068-24795-1-git-send-email-javier.viguera@digi.com> Subject: Re: [meta-webserver] cherokee: fix SRC_URI X-BeenThere: openembedded-devel@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: openembedded-devel@lists.openembedded.org List-Id: Using the OpenEmbedded metadata to build Distributions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Sep 2013 12:04:55 -0000 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit I can see that this is hosted on a University website, but is there a policy for using non-official mirrors? This seems like it opens up a lot of potential security problems IMO. Not only could the third-party mirror be easy to compromise, but how would be assure we don't use a malicious mirror? Or that a malicious contributer doesn't add a deliberatively tainted mirror? In short, is there some sort of policy on when and how we use third-party mirrors? Is security considerations part of the policy? Kind Regards, Emil Petersen On 05/09/13 13:54, Javier Viguera wrote: > The package is no longer available in the official cherokee site, > so download it from a mirror. > > Signed-off-by: Javier Viguera > --- > > Notes: > To be cherry-picked to Dylan as well. > > meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb b/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb > index 265e24e..4b2d68d 100644 > --- a/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb > +++ b/meta-webserver/recipes-httpd/cherokee/cherokee_1.2.98.bb > @@ -9,7 +9,7 @@ PR = "r9" > > DEPENDS = "libpcre openssl mysql5 ${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" > > -SRC_URI = "http://www.cherokee-project.com/download/1.2/${PV}/cherokee-${PV}.tar.gz \ > +SRC_URI = "ftp://ftp.osuosl.org/.1/cherokee/1.2/${PV}/cherokee-${PV}.tar.gz \ > file://cherokee.init \ > file://cherokee.service \ > " > _______________________________________________ > Openembedded-devel mailing list > Openembedded-devel@lists.openembedded.org > http://lists.openembedded.org/mailman/listinfo/openembedded-devel