Subject: Re: sepbuild, Separating builds for Pkgsrc
To: Mark Weinem <mark.weinem@onlinehome.de>
From: Hubert Feyrer <hubert@feyrer.de>
List: tech-pkg
Date: 01/22/2005 16:41:12
On Sat, 22 Jan 2005, Mark Weinem wrote:
>> http://plastictree.net/software/sepbuild/index.html
>
> The site has know an abstract:
>
> "sepbuild is a package for separating builds.
>
> A separating build is a build of a (possibly large) number of
> packages in such a way that there is a minimum influence among
> the packages. This reduces the impact a trojaned or malicious
> package might have on other packages. This reduction can be
> considerably large.
How is this different to a bulk build in a chroot environment (which we
already have, see
http://www.netbsd.org/Documentation/pkgsrc/binary.html#bulkbuild)?
- Hubert
--
NetBSD - Free AND Open! (And of course secure, portable, yadda yadda)