bug-groff
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug #57218] [PATCH] Reproducible builds support is broken and embeds ti


From: Ingo Schwarze
Subject: [bug #57218] [PATCH] Reproducible builds support is broken and embeds timezone
Date: Thu, 5 Nov 2020 09:45:14 -0500 (EST)
User-agent: Mozilla/5.0 (X11; OpenBSD amd64; rv:82.0) Gecko/20100101 Firefox/82.0

Follow-up Comment #7, bug #57218 (project groff):

To clarify:
1. I do not object to reproducible build support as far as it is easy to
implement and has no downsides.
2. In particular, i do not object to cjwatson@'s patch #50208 that gbranden@
puts forward in comment #6.  I did not test the patch, but i inspected it and
i think it makes things better.  Trusting that it has been tested, i think it
should be pushed.  While randomizing the order of functions in shared object
files definitely does provide security benefits, i don't see any security
benefit from randomizing the order of fonts in PDF files and the like...
3. I agree with gbranden@ that there is value in avoiding gratuitious, random
changes in build logs because that makes spotting build regressions easier. 
Sometimes, it's not possible without other downsides, but when it is, that's
good.
4. I do not insist that we delete %%CreationDate; Dave is right that there is
no consensus for doing that.

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?57218>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]