567508 – signatures for musl hardened stages

Bug 567508 - signatures for musl hardened stages

Summary: signatures for musl hardened stages

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Release Media
Classification:	Unclassified
Component:	Stages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Release Team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2015-12-04 00:52 UTC by simplicity
Modified:	2021-11-14 15:10 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description simplicity 2015-12-04 00:52:59 UTC

musl hardened stages are not currently signed.

Presumably this is because all relevant developers assure authenticity and integrity through other means - presumably bootstrapping from glibc, which is undocumented(?)

I would therefore like to request that musl hardened stage3 DIGESTS files be signed.

(More generally, signatures for all experimental stages would encourage better security hygiene among mere users.)

Comment 1 Andreas K. Hüttel archtester

2021-11-14 15:10:13 UTC

Signed now.