Richard Hughes

Results 1241 comments of Richard Hughes

I'm a debian person, so no idea I'm afraid. I'd suggest compiling by source -- ./contrib/setup should do a lot of the heavy lifting.

@superm1 I'm guessing this is a snap/apparmor issue -- have you ever seen anything like this before?

> It's clear how this would reduce the amount of redundant work for the developers of closed source firmware that utilize these FOSS projects Ohh it's used by open source...

@victor-cheng ../plugins/usi-dock/fu-usi-dock-dmc-device.c:60:27: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] 60 | serialnum = fu_device_get_serial(device);

No idea I'm afraid. Could you try and see if it works?

> how does the CycloneDX distinguish between development branches and "official" releases We're using the git tag, so in the SBOM file you'd get something like `3.5.0` as the version...

> So ideally we'll have an automated tag / release process that auto-fills the appropriate tokens. Ahh, this is done, magically. If you check out tag `3.5.0` as part of...

@steven-bellock right, that's true. In the two cases I personally care about (coreboot and EDK II) libspdm is checked out as a git submodule, and I'm not sure how many...

> For SBOMs, this becomes a larger question for the DMTF. Probably true. > In particular the entire DMTF should standardize on an SBOM format(s). DMTF does have an SBOM...

I think we'd need to be a lot more precise -- e.g. would the app be allowed to override, or override with a parental PIN for example? Also, where would...