[pkg-golang-devel] [pkg-go] Security support for packages written in Go

[Paul Tagliamonte]

We can change it to XSB-Go-Import-Path, but it only really applies for the
-dev packages; so it might need some fiddling to do right, yeah. I'll think
a bit more about it.

We could also likely build up mappings for Source -> import path, and index
from Binary control Source -> Source -> Import Path, but that's a bit
janky, yeah.



On Wed, Apr 6, 2016 at 2:52 PM, Peter Colberg <peter at colberg.org> wrote:

> On Tue, Apr 05, 2016 at 06:05:21PM -0400, Paul Tagliamonte wrote:
> > Love this idea, I wonder if the Import-Path XS header could help resolve
> > packages in a proof of concept
>
> If I am not mistaken, the XS-Go-Import-Path cannot be queried with
> dpkg-query since it is a field in the source package. What do you
> think of adding an XB-Go-Import-Path to golang-*-dev packages?
>
> Querying this field for 'golang-*-dev' to match the import paths
> output by `go list` would appear to be a lot faster than invoking
> `dpkg -S /usr/share/gocode/src/…` for each import path.
>
> Peter
>
> _______________________________________________
> Pkg-go-maintainers mailing list
> Pkg-go-maintainers at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
>



-- 
:wq
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-golang-devel/attachments/20160406/e5f31fee/attachment.html>