From ac2c4b1c77f567c6336463dbd492a8cb8ed61dfa Mon Sep 17 00:00:00 2001 From: Aurora Lanes <58722611+opensource-assist@users.noreply.github.com> Date: Wed, 29 Jan 2020 06:22:16 +0000 Subject: [PATCH 1/5] Update buildworker.rst --- buildworker.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/buildworker.rst b/buildworker.rst index 3e5deabe1..ff439fe7e 100644 --- a/buildworker.rst +++ b/buildworker.rst @@ -348,6 +348,9 @@ python-dev about buildbot security that includes examples of the tests for which privilege matters. There was no final consensus, but the information is useful as a point of reference. +Third-party buildbots are only used for testing fixes. +None of those buildbots,or systems that they run on are utilised to produce any CPython release materials. + .. [#] If the buildbot is going to do Framework builds, it is better to use the Apple-shipped Python so as to avoid any chance of the buildbot picking up components from the installed python.org python. From 397d166cf6a70fcf6c06d4dd17b0315793060bae Mon Sep 17 00:00:00 2001 From: Aurora Lanes <58722611+opensource-assist@users.noreply.github.com> Date: Wed, 29 Jan 2020 06:23:44 +0000 Subject: [PATCH 2/5] Update buildworker.rst --- buildworker.rst | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/buildworker.rst b/buildworker.rst index ff439fe7e..f7ec3e9a8 100644 --- a/buildworker.rst +++ b/buildworker.rst @@ -348,8 +348,7 @@ python-dev about buildbot security that includes examples of the tests for which privilege matters. There was no final consensus, but the information is useful as a point of reference. -Third-party buildbots are only used for testing fixes. -None of those buildbots,or systems that they run on are utilised to produce any CPython release materials. +Third-party buildbots are only used for testing fixes. None of those buildbots nor the system that they run on are utilised to produce any CPython release materials. .. [#] If the buildbot is going to do Framework builds, it is better to use the Apple-shipped Python so as to avoid any chance of the buildbot From 8a20b5815cf25570c83b38ecd88df768d8918906 Mon Sep 17 00:00:00 2001 From: Aurora Lanes <58722611+opensource-assist@users.noreply.github.com> Date: Wed, 29 Jan 2020 15:47:01 +0000 Subject: [PATCH 3/5] Update buildworker.rst Co-Authored-By: Pablo Galindo --- buildworker.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/buildworker.rst b/buildworker.rst index f7ec3e9a8..91b430077 100644 --- a/buildworker.rst +++ b/buildworker.rst @@ -348,7 +348,7 @@ python-dev about buildbot security that includes examples of the tests for which privilege matters. There was no final consensus, but the information is useful as a point of reference. -Third-party buildbots are only used for testing fixes. None of those buildbots nor the system that they run on are utilised to produce any CPython release materials. +Third-party buildbots are only used for testing purposes. None of the buildbots nor the system that they run on are utilised to produce any release materials. .. [#] If the buildbot is going to do Framework builds, it is better to use the Apple-shipped Python so as to avoid any chance of the buildbot From 1b72cd38976d3f4771c49ff54d252fed493d79ad Mon Sep 17 00:00:00 2001 From: Aurora Lanes <58722611+opensource-assist@users.noreply.github.com> Date: Wed, 29 Jan 2020 17:20:36 +0000 Subject: [PATCH 4/5] Update buildbots.rst --- buildbots.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/buildbots.rst b/buildbots.rst index c37b1355b..675f1698b 100644 --- a/buildbots.rst +++ b/buildbots.rst @@ -232,5 +232,11 @@ recommend you change (temporarily, of course) the contents of the ``buildbottest`` clause in ``Makefile.pre.in``; or, for Windows builders, the ``Tools/buildbot/test.bat`` script. +Security considerations concerning third-party buildbots +----------------------- + +Third-party buildbots are only used for testing purposes. +None of the buildbots nor the system that they run on are utilised to produce any release materials. + .. seealso:: :ref:`buildworker` From 836cda188597bf0b90a8d64da6c6827f19489da0 Mon Sep 17 00:00:00 2001 From: Aurora Lanes <58722611+opensource-assist@users.noreply.github.com> Date: Wed, 29 Jan 2020 17:27:43 +0000 Subject: [PATCH 5/5] Update buildbots.rst --- buildbots.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/buildbots.rst b/buildbots.rst index 675f1698b..e6625e9be 100644 --- a/buildbots.rst +++ b/buildbots.rst @@ -233,7 +233,7 @@ recommend you change (temporarily, of course) the contents of the the ``Tools/buildbot/test.bat`` script. Security considerations concerning third-party buildbots ------------------------ +-------------------------------------------------------- Third-party buildbots are only used for testing purposes. None of the buildbots nor the system that they run on are utilised to produce any release materials.