From: Marius Mauch Date: Tue, 9 Oct 2007 21:26:01 +0000 (-0000) Subject: add description to security set handlers X-Git-Tag: v2.2_pre1~667 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=ef96d1aaff0cd6adf18ffcf028e5f3cd2074551b;p=portage.git add description to security set handlers svn path=/main/trunk/; revision=8030 --- diff --git a/doc/config/sets.docbook b/doc/config/sets.docbook index 002fc288f..70b70241d 100644 --- a/doc/config/sets.docbook +++ b/doc/config/sets.docbook @@ -266,6 +266,11 @@ portage.sets.security.SecuritySet + The set created by this class contains all atoms that need to be installed + to apply all GLSAs in the ebuild repository, no matter if they are already + applied or no (it's equivalent to the all target of + glsa-check). Generally it should be avoided in configurations in favor of + NewAffectedSet described below. @@ -282,6 +287,7 @@ algorithm and use the lowest version that matches the GLSA and is higher than the currently installed version (least change policy). + @@ -289,6 +295,8 @@ portage.sets.security.NewGlsaSet + Like SecuritySet, + but ignores all GLSAs that were already applied or injected previously. @@ -307,6 +315,10 @@ portage.sets.security.NewAffectedSet + Like SecuritySet, + but ignores all GLSAs that were already applied or inejcted previously, + and all GLSAs that don't affect the current system. Practically there + should be no difference to NewGlsaSet though. @@ -325,6 +337,9 @@ portage.sets.security.AffectedSet + Like SecuritySet, + but ignores all GLSAs that don't affect the current system. Practically + there should be no difference to SecuritySet though. @@ -343,6 +358,9 @@ portage.sets.shell.CommandOutputSet + As the name says, this class creates a package set based on the output of + a given command. The command is run once when the set is accessed + for the first time during the current session. @@ -351,7 +369,9 @@ In single set configurations this class supports the following options: command: Required. Specifies the command - that should be executed to generate the package set. + that should be executed to generate the package set. It should + output a newline separated list of simple and/or versioned atoms + on stdout.