2 ms·
I don't think that's true? Increasing build security is about limited the number of folks who can modify the process. That's orthogonal to auditability.
by asdfasgasdgasdg 7y ago
I don't think that's true? Increasing build security is about limited the number of folks who can modify the process. That's orthogonal to auditability.
- Arelius 7y agoFair Point. It is orthogonal, but it is often correlated in practice. Quite often permission systems to prevent modification are also used to prevent visibility. I'd also say it's not completely unrelated. Let's consider a hidden build machine process. Once you've hidden that, preventing modifications to the build process by people "not in the know" makes it much less likely that said process can be discovered (either on purpose or accident) If everyone can and does have full access to those build machines it increases the likelihood that someone making a modification could run into said process.