From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id IZPBGhNoImdcwB8AWB0awg (envelope-from ) for ; Wed, 30 Oct 2024 13:08:35 -0400 Authentication-Results: simark.ca; dkim=pass (1024-bit key; secure) header.d=sourceware.org header.i=@sourceware.org header.a=rsa-sha256 header.s=default header.b=f85OeseJ; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id 5CD831E5A1; Wed, 30 Oct 2024 13:08:35 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-6.8 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL, RCVD_IN_VALIDITY_SAFE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS autolearn=ham autolearn_force=no version=4.0.0 Received: from server2.sourceware.org (server2.sourceware.org [8.43.85.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 668ED1E35A for ; Wed, 30 Oct 2024 13:08:34 -0400 (EDT) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 0820F385843D for ; Wed, 30 Oct 2024 17:08:34 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 0820F385843D DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1730308114; bh=Uv3N6IT9SawUpQE0fHGZdai3JGX7GQhGkihXE8XqXpM=; h=Date:To:cc:Subject:In-Reply-To:References:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From:Reply-To:From; b=f85OeseJ4cgXpfcYcbCQjkOsO9RiHUN7QHB0tBQOKPwB5z+OZVmJp6Wk10AY5GDuN 2CFHn/Y3nM+FQP/pJQfr+DU/0M38sywDKzPUzqQ9sUJRrOrjPGLGJMu3+30XEON/V8 UV/CZbtJZzFvOwrjWis/ajNAac8oMmSPP35qP5p8= Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTP id 64EC3385841E for ; Wed, 30 Oct 2024 17:07:02 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 64EC3385841E ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 64EC3385841E ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1730308024; cv=none; b=NeieffH6mXAo/V6vXmLBDwOtIIR5U/OEXi1t650ALQajzErKnWuobq+zVnCZ3SGMPje3BzjrZfVCdwbJyEQ5kXXHf6dW4950K6MdFwDx6w7FJS1BLWXy0GjCcnEYHJ1Y526cpJzjuGQhHRthnHRIl4D8J/9g7hOgoSzcvLEpXXQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1730308024; c=relaxed/simple; bh=nHLBbgzqApeJxl5T+cU1/NZhUK+aPaCCjbl4VEvWFTk=; h=DKIM-Signature:Date:From:To:Subject:Message-ID:MIME-Version; b=Ev5m+U8dELwkbWaNwwQU3uyp6o/dF5YfpsP0/pvvVOW+GaxamCcYHjsY/AKQFmi+LBsdcGFvn33XkP85r+C45gQoswlSfg/HfMz4u9EvlNoPxgrN1NbrpKUmHLorQAPAwdYJlwAgMI9XMInbz8SoFZpd0DDjnlNanJCAX9CwITk= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from mail-lj1-f198.google.com (mail-lj1-f198.google.com [209.85.208.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-631-E9FZnjjvNIm3urXjtj8vsg-1; Wed, 30 Oct 2024 13:06:58 -0400 X-MC-Unique: E9FZnjjvNIm3urXjtj8vsg-1 Received: by mail-lj1-f198.google.com with SMTP id 38308e7fff4ca-2f759001cb1so90571fa.0 for ; Wed, 30 Oct 2024 10:06:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730308017; x=1730912817; h=mime-version:references:message-id:in-reply-to:subject:cc:to:from :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Uv3N6IT9SawUpQE0fHGZdai3JGX7GQhGkihXE8XqXpM=; b=sArCenkhKDuAg71RN9EdhlUWg5ScW888u1rcWyOVvLBmgNZtljxqVEfEiIyZm4tyiq RpzW/FAXndiVuxrdPCg2hcKi0+fgmUx9YRotbfRvh/LKFo19Vy4CBnnGm4NN+djLIiMH J0iC9ibkv7ir8ZiXJDISBxA/N6DBeQQ1eGFFXTVzpxk99tpiwwglxXC5MbVrR4s6R7CD kT+sGewb96cI0pXaoYluDIXfVBLGWl33tmTWM3IiX+zrN1iaj/YKbbi2asyB9qiPoxjI Hsb7iM1Tdg2f4rl9iCdIrHUPbK6IsaM13mK22bih38NlRf1VR7NNmXUMo9YkKlGHAZEh zywg== X-Forwarded-Encrypted: i=1; AJvYcCVJ4KYYfiyWdWAwbTF4diROsAzIJ1mlDO6gpjDerlA495Ay8d8mHQcXAWoeU57ka8byifU=@sourceware.org X-Gm-Message-State: AOJu0YznvGe2Q/7YWVLA94IcyRH7k3jZLy10yOYi/akjD0tp6byE1jQa V4wrd3PIbrpb7dgrkpLfJ5PsN8O96ZrDsFYnledYIH9h1GAr++c3J27pxIc/5V2MH0BbMLj9WSU +3HdZoMeAel9HbR9iNDZhbK42yBsxnY+FiGCiySdrRnHevIvS X-Received: by 2002:a2e:bc15:0:b0:2fa:c5d9:105b with SMTP id 38308e7fff4ca-2fcbdf61167mr128925721fa.2.1730308017298; Wed, 30 Oct 2024 10:06:57 -0700 (PDT) X-Google-Smtp-Source: AGHT+IFd5hFo7/oapuYd2j8TGiFM/Siukmal4xqSGh8agqdT1EdYQsZxctYHX9deE+ED9Z1rFthogA== X-Received: by 2002:a2e:bc15:0:b0:2fa:c5d9:105b with SMTP id 38308e7fff4ca-2fcbdf61167mr128925191fa.2.1730308016706; Wed, 30 Oct 2024 10:06:56 -0700 (PDT) Received: from digraph.polyomino.org.uk (digraph.polyomino.org.uk. [2001:8b0:bf73:93f7::51bb:e332]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-431bd947de6sm26836485e9.13.2024.10.30.10.06.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 30 Oct 2024 10:06:56 -0700 (PDT) Received: from jsm28 (helo=localhost) by digraph.polyomino.org.uk with local-esmtp (Exim 4.97) (envelope-from ) id 1t6C9m-00000009QcM-2ODi; Wed, 30 Oct 2024 17:06:54 +0000 Date: Wed, 30 Oct 2024 17:06:54 +0000 (UTC) To: Carlos O'Donell cc: Mark Wielaard , gcc developers , glibc developers , gdb developers , binutils developers , Overseers mailing list , cti-tac@lists.linuxfoundation.org, =?ISO-8859-15?Q?Zo=EB_Kooyman?= , "Karen M. Sandler" Subject: Re: Core Toolchain Infrastructure - October 2024 update In-Reply-To: <5691d7c8-f92e-46f3-8edf-c83e085dbfa2@redhat.com> Message-ID: <94813230-3ceb-8060-4272-57612b65cfb1@redhat.com> References: <9ee5b9e1-3f84-4d9e-8249-7a4bf8080bb0@redhat.com> <20241030103912.GD28606@gnu.wildebeest.org> <3a2c2d35-3b86-4286-a393-5ec166659f92@redhat.com> <5691d7c8-f92e-46f3-8edf-c83e085dbfa2@redhat.com> MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=US-ASCII X-BeenThere: gdb@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Joseph Myers via Gdb Reply-To: Joseph Myers Errors-To: gdb-bounces~public-inbox=simark.ca@sourceware.org Sender: "Gdb" On Wed, 30 Oct 2024, Carlos O'Donell via Gcc wrote: > Have you broken down those project goals into actionable steps that > could be taken? > > For example filing Sourceware Infrastructure bugs for each service that > needs to be migrated into a VM and isolated (with a top level tracker > for "Increased isolation")? Note that we have the CTI service enumeration which effectively identifies the various services that should be isolated for various GNU toolchain projects. There may be other services on Sourceware that aren't used by any of the GNU toolchain projects with CTI service enumerations. Those can still be of security relevance to the toolchain, if a compromise of one of those services could be leveraged to compromise other services or projects - isolation matters both inward and outward, for both current and future services and projects. -- Joseph S. Myers josmyers@redhat.com