On Mon, 2026-08-31 at 12:34 -0700, Gordon Messmer wrote: > A number of Fedora packages have adopted a GOT audit test that I > wrote > after the xz-utils attack. It looks for signs of ELF namespace > tampering > in running processes. I'd like to propose that Fedora deploy it as a > generic test. > > I talked to Cristian about that in the CI channel in June, and he > said > "it's fine from Fedora-CI technical perspective but needs more > discussion on the layer deeper down". Cristian asked Maxwell G to > review > the test, and Maxwell suggested that we discuss it here when I > followed > up with him. > > https://codeberg.org/gordonmessmer/got-audit-pipeline > https://codeberg.org/gordonmessmer/got-audit > > The version of "got-audit" above is a machine-generated port of the > original: In case you are not aware - this seems to be against Codeberg's new terms of service
https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html > Projects written and maintained with heavy use of LLMs You might want to move it somewhere else before Codeberg admins take action. HTH, -- _o) Michel Lind _( ) https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 README: https://fedoraproject.org/wiki/User:Salimma#README
signature.asc
Description: This is a digitally signed message part
-- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
