On Mon, 14 Sep 2020 at 04:34, Lee Chee Yang <[email protected]> wrote:
> use allowlist instead of whitelist.
> Replace CVE_CHECK_PN_WHITELIST with CVE_CHECK_PN_ALLOWLIST.

This is a deprecated variable already, I wouldn't bother changing it.

> Replace CVE_CHECK_WHITELIST with CVE_CHECK_ALLOWLIST.

ALLOWLIST really is a horrible word as this isn't a list of CVEs being
allowed, it's a list of CVEs being not considered.  CVE_CHECK_IGNORE?
CVE_CHECK_EXCLUDE?

I do also think that we should do these variable renames in one go,
instead of piecemeal either side of a release.

Ross
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#142504): 
https://lists.openembedded.org/g/openembedded-core/message/142504
Mute This Topic: https://lists.openembedded.org/mt/76835201/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to