{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/851","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/851/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/851/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/851/events","html_url":"https://github.com/freedomofpress/securedrop/issues/851","id":55697209,"number":851,"title":"Verifying the Ubuntu kernel overlay","user":{"login":"garrettr","id":407302,"avatar_url":"https://avatars.githubusercontent.com/u/407302?v=3","gravatar_id":"","url":"https://api.github.com/users/garrettr","html_url":"https://github.com/garrettr","followers_url":"https://api.github.com/users/garrettr/followers","following_url":"https://api.github.com/users/garrettr/following{/other_user}","gists_url":"https://api.github.com/users/garrettr/gists{/gist_id}","starred_url":"https://api.github.com/users/garrettr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garrettr/subscriptions","organizations_url":"https://api.github.com/users/garrettr/orgs","repos_url":"https://api.github.com/users/garrettr/repos","events_url":"https://api.github.com/users/garrettr/events{/privacy}","received_events_url":"https://api.github.com/users/garrettr/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/freedomofpress/securedrop/labels/docs","name":"docs","color":"d4c5f9"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/freedomofpress/securedrop/milestones/5","html_url":"https://github.com/freedomofpress/securedrop/milestones/0.4","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/milestones/5/labels","id":691723,"number":5,"title":"0.4","description":"Issues for the next minor release of SecureDrop","creator":{"login":"garrettr","id":407302,"avatar_url":"https://avatars.githubusercontent.com/u/407302?v=3","gravatar_id":"","url":"https://api.github.com/users/garrettr","html_url":"https://github.com/garrettr","followers_url":"https://api.github.com/users/garrettr/followers","following_url":"https://api.github.com/users/garrettr/following{/other_user}","gists_url":"https://api.github.com/users/garrettr/gists{/gist_id}","starred_url":"https://api.github.com/users/garrettr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garrettr/subscriptions","organizations_url":"https://api.github.com/users/garrettr/orgs","repos_url":"https://api.github.com/users/garrettr/repos","events_url":"https://api.github.com/users/garrettr/events{/privacy}","received_events_url":"https://api.github.com/users/garrettr/received_events","type":"User","site_admin":false},"open_issues":49,"closed_issues":2,"state":"open","created_at":"2014-06-15T22:57:42Z","updated_at":"2015-03-27T00:57:33Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-01-28T00:33:49Z","updated_at":"2015-03-27T00:57:33Z","closed_at":"2015-03-27T00:57:33Z","body":"The current instructions for verifying the integrity of the Ubuntu kernel overlay in `docs/ubuntu_grsec.md` are now out of date. The developers whose keys we explicitly recommend downloading did not sign the latest release; instead, it was signed by Seth Forshee.\r\n\r\nWe should edit these instructions to be more general. They should work all or at least most of the time, while still providing a decent trust basis. My idea is:\r\n\r\n1.`gpg --search-keys` for the person who signed the most recent commit.\r\n2. Verify that key somehow (WoT, ...?)"},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/86776648","html_url":"https://github.com/freedomofpress/securedrop/issues/851#issuecomment-86776648","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/851","id":86776648,"user":{"login":"garrettr","id":407302,"avatar_url":"https://avatars.githubusercontent.com/u/407302?v=3","gravatar_id":"","url":"https://api.github.com/users/garrettr","html_url":"https://github.com/garrettr","followers_url":"https://api.github.com/users/garrettr/followers","following_url":"https://api.github.com/users/garrettr/following{/other_user}","gists_url":"https://api.github.com/users/garrettr/gists{/gist_id}","starred_url":"https://api.github.com/users/garrettr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garrettr/subscriptions","organizations_url":"https://api.github.com/users/garrettr/orgs","repos_url":"https://api.github.com/users/garrettr/repos","events_url":"https://api.github.com/users/garrettr/events{/privacy}","received_events_url":"https://api.github.com/users/garrettr/received_events","type":"User","site_admin":false},"created_at":"2015-03-27T00:57:33Z","updated_at":"2015-03-27T00:57:33Z","body":"Since we moved the grsec stuff to its own repo before 0.3, I am migrating this issue to the dedicated repo's issue tracker."}}