payloads/external: Clone GRUB2 over HTTPS
Since the git:// protocol is unencrypted and unauthenticated, there's a security risk associated with using it: A man-in-the-middle attacker could replace e.g. the master branch with malicious code. Mitigate this risk somewhat by cloning GRUB2 via HTTPS. Change-Id: Ice8f8d108e7dfa1a1ecd58d9735944fa9570ace8 Signed-off-by: Jonathan Neuschäfer <j.neuschaefer@gmx.net> Reviewed-on: https://review.coreboot.org/21344 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Paul Menzel <paulepanter@users.sourceforge.net> Reviewed-by: Alexander Couzens <lynxis@fe80.eu>
This commit is contained in:
parent
602d0a42d4
commit
a1c42cca00
|
@ -3,7 +3,7 @@ TAG-$(CONFIG_GRUB2_REVISION)=$(CONFIG_GRUB2_REVISION_ID)
|
||||||
NAME-$(CONFIG_GRUB2_MASTER)=HEAD
|
NAME-$(CONFIG_GRUB2_MASTER)=HEAD
|
||||||
NAME-$(CONFIG_GRUB2_REVISION)=$(CONFIG_GRUB2_REVISION_ID)
|
NAME-$(CONFIG_GRUB2_REVISION)=$(CONFIG_GRUB2_REVISION_ID)
|
||||||
|
|
||||||
project_git_repo=git://git.sv.gnu.org/grub.git
|
project_git_repo=https://git.savannah.gnu.org/git/grub.git/
|
||||||
project_dir=grub2
|
project_dir=grub2
|
||||||
|
|
||||||
unexport HOSTCC CC LD OBJCOPY STRIP
|
unexport HOSTCC CC LD OBJCOPY STRIP
|
||||||
|
|
Loading…
Reference in New Issue