Opened 3 years ago

Closed 3 years ago

#21402 closed defect (fixed)

The sandbox git tag is not checked with gpg

Reported by: boklm Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: TorBrowserTeam201702R, tbb-gitian
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

During the Tor Browser build, we are using in gitian/descriptors/linux/gitian-sandbox.yml a git clone of sandboxed-tor-browser, but we don't check that the git tag we are using is gpg signed.

Child Tickets

Change History (2)

comment:1 Changed 3 years ago by boklm

Keywords: TorBrowserTeam201702R added; TorBrowserTeam201702 removed
Status: newneeds_review

The branch bug_21402 in my git repository should fix this:
https://gitweb.torproject.org/user/boklm/tor-browser-bundle.git/commit/?h=bug_21402

comment:2 Changed 3 years ago by gk

Keywords: tbb-gitian added
Resolution: fixed
Status: needs_reviewclosed

Thanks, fixed on master with commit 917d38c1d58c8cb11ff5b016054d2589d313882e.

Note: See TracTickets for help on using tickets.