[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Guix & signed archive export/import

From: Niels Möller
Subject: Re: Guix & signed archive export/import
Date: Mon, 30 Dec 2013 18:45:09 +0100
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (usg-unix-v)

address@hidden (Ludovic Courtès) writes:

> Sure, but again, all we have is a small subset of SPKI, and no
> delegations.

I think spki gets really interesting once you have delegations. I intend
to add that to lsh, for both user and host keys. But it's been some years
without any progress on that front.

> Currently I don’t see how such tags could be used, and they may be hard
> to define.
> In Guix, all package binaries are collected in the “store”, a big
> directory with one sub-directory per package.

Then, it would make some sense to have a tag syntax to restrict
authorization to a single package, and not allow installation of the
packege to touch anything outside of its corresponding directory.


Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]