| ... |
... |
@@ -2,32 +2,32 @@ |
|
2
|
2
|
DEBIAN-SPECIFIC NOTES
|
|
3
|
3
|
*********************
|
|
4
|
4
|
|
|
|
5
|
+------------------------------------------------------------------------
|
|
5
|
6
|
security archive
|
|
6
|
|
-================
|
|
|
7
|
+------------------------------------------------------------------------
|
|
7
|
8
|
|
|
8
|
9
|
NEW processing
|
|
9
|
|
---------------
|
|
10
|
|
-
|
|
11
|
|
-- cronoff
|
|
12
|
|
-- dak process-new, accept
|
|
13
|
|
-- cd /srv/security-master.debian.org/queue/new/COMMENTS
|
|
14
|
|
-- Change first line to NOTOK, add comment "Moving back to unchecked."
|
|
|
10
|
+========================================================================
|
|
|
11
|
+- ``cronoff``
|
|
|
12
|
+- ``CHANGES=FILENAME.changes``
|
|
|
13
|
+- ``dak process-new``, ACCEPT
|
|
|
14
|
+- ``cd /srv/security-master.debian.org/queue/new/COMMENTS``
|
|
|
15
|
+- Change first line to **NOTOK**, add comment "Moving back to unchecked."
|
|
15
|
16
|
- Rename ACCEPT.* to REJECT.*
|
|
16
|
|
-- dak process-policy new; dak clean-suites
|
|
17
|
|
-- cd /srv/security-master.debian.org/queue/reject
|
|
18
|
|
-- dak admin forget-signature bla.changes
|
|
19
|
|
-- dcmd mv -n bla.changes ../unchecked
|
|
20
|
|
-- /srv/security-master.debian.org/dak/config/debian-security/cron.unchecked
|
|
21
|
|
-- cronon
|
|
|
17
|
+- ``dak process-policy new; dak clean-suites``
|
|
|
18
|
+- ``cd /srv/security-master.debian.org/queue/reject``
|
|
|
19
|
+- ``dak admin forget-signature ${CHANGES}``
|
|
|
20
|
+- ``dcmd mv -n ${CHANGES} ../unchecked``
|
|
|
21
|
+- ``/srv/security-master.debian.org/dak/config/debian-security/cron.unchecked``
|
|
|
22
|
+- ``cronon``
|
|
22
|
23
|
|
|
23
|
24
|
Built-Using
|
|
24
|
|
------------
|
|
25
|
|
-
|
|
|
25
|
+========================================================================
|
|
26
|
26
|
Source packages referred to via Built-Using need to be included in the
|
|
27
|
27
|
security archive:
|
|
28
|
28
|
|
|
29
|
29
|
- Obtain & verify .dsc
|
|
30
|
|
-- dak import built-using updates/<component> <.dsc...>
|
|
|
30
|
+- ``dak import built-using updates/<component> <.dsc...>``
|
|
31
|
31
|
|
|
32
|
32
|
If the .dsc is signed by an old key no longer in the keyring, use
|
|
33
|
|
---ignore-signature. Make extra sure the .dsc is correct.
|
|
|
33
|
+``--ignore-signature``. Make **extra sure** the .dsc is *correct*.
|