Fedora Security Response Team

[Josh Bressers]

> > 
> > We will need a package manifest.  Basically a file that tells us which
> > packages and versions we're currently shipping in extras.  A tool to
> > generate this will also be needed since we'll want to update this file on a
> > regular basis.  Given how fast Extras changes I think this will be the
> > easiest way to check if we currently ship package <foo>.
> 
> There have been a few scripts that have been brought to my attention for
> this, unless someone else gets to it first, I'm going to create a "tools"
> directory in CVS and add such a script.

I just added a script which was written by Jason L Tibbitts III (it was a
bit help, thanks Jason).  You can see it here if you wish:
http://cvs.fedora.redhat.com/viewcvs/fedora-security/tools/?root=fedora

Jason's original script relied on a local archive of things, this one grabs
what it needs remotely.  It's not the fastest thing ever, but it should be
good enough for now.

% ./package-release nmh
Found package nmh in owners.list:
  Distro:       Fedora Extras
  Desc:         A mail handling system with a command line interface
  Owner:        bressers at redhat.com
  CC:
  Releases and versions:
    3   1.1     13.fc3 /pub/fedora/linux/extras/3/SRPMS/nmh-1.1-13.fc3.src.rpm
    3   1.1     14.fc3 /pub/fedora/linux/extras/3/SRPMS/nmh-1.1-14.fc3.src.rpm
    4   1.1     13.fc4 /pub/fedora/linux/extras/4/SRPMS/nmh-1.1-13.fc4.src.rpm
    4   1.1     14.fc4 /pub/fedora/linux/extras/4/SRPMS/nmh-1.1-14.fc4.src.rpm
    5   1.1     18.fc5 /pub/fedora/linux/extras/5/SRPMS/nmh-1.1-18.fc5.src.rpm
    dev 1.1     18.fc5 /pub/fedora/linux/extras/development/SRPMS/nmh-1.1-18.fc5.src.rpm

-- 
    JB