[Git][reproducible-builds/specs/source-date-epoch-spec][content] 3 commits: wording: prevents against => protects against
Bernhard M. Wiedemann (@bmwiedemann-guest)
gitlab at salsa.debian.org
Wed Sep 23 18:06:27 UTC 2026
Bernhard M. Wiedemann pushed to branch content at Reproducible Builds / specs / source-date-epoch-spec
Commits:
788b7257 by Bernhard M. Wiedemann at 2026-09-23T19:35:40+02:00
wording: prevents against => protects against
- - - - -
f47bdc4f by Bernhard M. Wiedemann at 2026-09-23T19:43:11+02:00
Change flaws to instructions
- - - - -
33588047 by Bernhard M. Wiedemann at 2026-09-23T19:43:13+02:00
Adapt motivation section
We copied the current definition from the website,
capitalized R-B and
show that we care about other users beside developers (developers also count as users)
- - - - -
1 changed file:
- source-date-epoch-spec.xml
Changes:
=====================================
source-date-epoch-spec.xml
=====================================
@@ -57,18 +57,20 @@
<sect1>
<title>Motivation</title>
<para>
+ Reproducible Builds are a set of software development practices that
+ create an independently-verifiable path from source to binary code.
Whilst anyone can inspect the source code of free software for
- malicious flaws, most distributions provide binary (or
+ malicious instructions, most distributions provide binary (or
"compiled") packages to end users. The motivation behind
- "reproducible" builds is to allow verification that no flaws
+ Reproducible Builds is to allow verification that no malicious instructions
have been introduced during this compilation process by
promising identical binary packages are always generated from a
given source.
</para>
<para>
- This prevents against the installation of backdoor-introducing
- malware on developers' machines as an attacker would need to
- simultaneously infect all the developers attempting to
+ This protects against the installation of
+ malware on users' machines as an attacker would need to
+ simultaneously infect all the machines attempting to
reproduce the build. In addition, a reproducible build has
other technical advantages:
</para>
View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/896ba62dcf8383380126508644bd7ff04d5389b5...33588047b2244924971705b0d339d52b55397cc6
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/896ba62dcf8383380126508644bd7ff04d5389b5...33588047b2244924971705b0d339d52b55397cc6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20260923/834c2192/attachment.htm>
More information about the rb-commits
mailing list