diff options
| author |   Michał Górny <mgorny@gentoo.org> | 2017-08-19 10:04:13 +0200 |
|---|---|---|
| committer | Michał Górny <mgorny@gentoo.org> | 2017-08-25 15:51:54 +0200 |
| commit | 737838e212d9e59feb700e651a6236711cc8d368 (patch) | |
| tree | 68f52e1c727db2c5253a770dc786f5c866e29225 /eclass | |
| parent | app-eselect/eselect-postgresql: amd64 stable wrt bug #627476 (diff) | |
| download | gentoo-737838e212d9e59feb700e651a6236711cc8d368.tar.gz gentoo-737838e212d9e59feb700e651a6236711cc8d368.tar.bz2 gentoo-737838e212d9e59feb700e651a6236711cc8d368.zip | |
git-r3.eclass: Update docs to discourage unsafe protocols
Diffstat (limited to 'eclass')
| -rw-r--r-- | eclass/git-r3.eclass | 16 |
1 files changed, 10 insertions, 6 deletions
diff --git a/eclass/git-r3.eclass b/eclass/git-r3.eclass index bc7d4d920299..a0aa004caa25 100644 --- a/eclass/git-r3.eclass +++ b/eclass/git-r3.eclass @@ -105,18 +105,22 @@ fi # @ECLASS-VARIABLE: EGIT_REPO_URI # @REQUIRED # @DESCRIPTION: -# URIs to the repository, e.g. git://foo, https://foo. If multiple URIs -# are provided, the eclass will consider them as fallback URIs to try -# if the first URI does not work. For supported URI syntaxes, read up -# the manpage for git-clone(1). +# URIs to the repository, e.g. https://foo. If multiple URIs are +# provided, the eclass will consider the remaining URIs as fallbacks +# to try if the first URI does not work. For supported URI syntaxes, +# read the manpage for git-clone(1). # -# It can be overriden via env using ${PN}_LIVE_REPO variable. +# URIs should be using https:// whenever possible. http:// and git:// +# URIs are completely unsecured and their use (even if only as +# a fallback) renders the ebuild completely vulnerable to MITM attacks. +# +# It can be overridden via env using ${PN}_LIVE_REPO variable. # # Can be a whitespace-separated list or an array. # # Example: # @CODE -# EGIT_REPO_URI="git://a/b.git https://c/d.git" +# EGIT_REPO_URI="https://a/b.git https://c/d.git" # @CODE # @ECLASS-VARIABLE: EVCS_OFFLINE |