summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichał Górny <mgorny@gentoo.org>2017-08-19 10:04:13 +0200
committerMichał Górny <mgorny@gentoo.org>2017-08-25 15:51:54 +0200
commit737838e212d9e59feb700e651a6236711cc8d368 (patch)
tree68f52e1c727db2c5253a770dc786f5c866e29225 /eclass/git-r3.eclass
parentapp-eselect/eselect-postgresql: amd64 stable wrt bug #627476 (diff)
downloadgentoo-737838e212d9e59feb700e651a6236711cc8d368.tar.gz
gentoo-737838e212d9e59feb700e651a6236711cc8d368.tar.bz2
gentoo-737838e212d9e59feb700e651a6236711cc8d368.zip
git-r3.eclass: Update docs to discourage unsafe protocols
Diffstat (limited to 'eclass/git-r3.eclass')
-rw-r--r--eclass/git-r3.eclass16
1 files changed, 10 insertions, 6 deletions
diff --git a/eclass/git-r3.eclass b/eclass/git-r3.eclass
index bc7d4d920299..a0aa004caa25 100644
--- a/eclass/git-r3.eclass
+++ b/eclass/git-r3.eclass
@@ -105,18 +105,22 @@ fi
# @ECLASS-VARIABLE: EGIT_REPO_URI
# @REQUIRED
# @DESCRIPTION:
-# URIs to the repository, e.g. git://foo, https://foo. If multiple URIs
-# are provided, the eclass will consider them as fallback URIs to try
-# if the first URI does not work. For supported URI syntaxes, read up
-# the manpage for git-clone(1).
+# URIs to the repository, e.g. https://foo. If multiple URIs are
+# provided, the eclass will consider the remaining URIs as fallbacks
+# to try if the first URI does not work. For supported URI syntaxes,
+# read the manpage for git-clone(1).
#
-# It can be overriden via env using ${PN}_LIVE_REPO variable.
+# URIs should be using https:// whenever possible. http:// and git://
+# URIs are completely unsecured and their use (even if only as
+# a fallback) renders the ebuild completely vulnerable to MITM attacks.
+#
+# It can be overridden via env using ${PN}_LIVE_REPO variable.
#
# Can be a whitespace-separated list or an array.
#
# Example:
# @CODE
-# EGIT_REPO_URI="git://a/b.git https://c/d.git"
+# EGIT_REPO_URI="https://a/b.git https://c/d.git"
# @CODE
# @ECLASS-VARIABLE: EVCS_OFFLINE