couchdb-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <>
Subject [Couchdb Wiki] Update of "Release_Procedure" by NoahSlater
Date Sun, 10 Mar 2013 20:04:15 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Couchdb Wiki" for change notification.

The "Release_Procedure" page has been changed by NoahSlater:

  == Checking the Candidate ==
+ All of the standard checks are performed for you by the scripts.
- Assume that you cannot trust:
+ However, assume that you cannot trust:
   * The source code the archive was built from.
   * The host operating system the archive was built on.
@@ -243, +245 @@

  Some ideas:
   * Verify the contents of the generated files.
+    * This could be done by preparing your own reference archive, and comparing the files.
   * Audit the types of file contained within the archive.
+    * Is anything unexpected included in the archive?
-  * Run a virus or exploit scanner on the archive.
+  * Run a virus scanner on the archive.
+    * Are there any known threats detected?
  This part of the process is left to your discretion.

View raw message