[oe] [meta-oe][PATCH] libmxml: Use autotools bbclass and cleanup the recipe a bit.
Adrian Bunk
bunk at stusta.de
Wed Aug 21 19:48:03 UTC 2019
On Wed, Aug 21, 2019 at 09:12:14PM +0200, Piotr Tworek wrote:
>....
> Fortunately for us upstream also tags releases
> in git so we can use those tags to fetch correct version of the sources.
>...
There are various reasons why this is not a good idea.
For example upstream might move the tag (yes, this does happen...),
or someone might do a man-in-the-middle attack on a user building
this package.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
More information about the Openembedded-devel
mailing list