Arch Linux and (the lack of) package signing [LWN.net]

Arch Linux and (the lack of) package signing

Posted Mar 24, 2011 19:48 UTC (Thu) by vapier (subscriber, #15768)
In reply to: Arch Linux and (the lack of) package signing by tetromino
Parent article: Arch Linux and (the lack of) package signing

hmm, should be trivial to start enforcing manifest signing in the main tree. it's trivial to setup keys after all.

$ find *-* -maxdepth 2 -name Manifest | wc -l
14438
$ find *-* -maxdepth 2 -name Manifest -exec grep -l 'BEGIN PGP SIGNATURE' {} + | wc -l
6032

that is fairly abysmal ...

(Log in to post comments)