GLEP: 58 Title: Security of distribution of Gentoo software -
Infrastructure to User distribution - MetaManifest Version:
$Revision: 1.10 $ Last-Modified: $Date: 2010/04/07 21:34:24 $
Author: Robin Hugh Johnson , Status: Draft Type: Standards Track
Content-Type: text/x-rst Requires: 44, 60 Created: October 2006
Updated: November 2007, June 2008, July 2008, October 2008,
January 2010 Post-History: December 2009, January 2010 ========
Abstract ======== MetaManifest provides a means of verifiable
distribution from Gentoo Infrastructure to a user system, while
data is conveyed over completely untrusted networks and system,
by extending the Manifest2 specification, and adding a top-level
Manifest file, with support for other nested Manifests.
========== Motivation ========== As part of a comprehensive
security plan, we need a way to prove that something originating
from Gentoo as an organization (read Gentoo-owned hardware, run
by infrastructure), has not been tampered with. This allows the
usage of third-party rs