McGee: The real story behind Arch Linux package signing
Posted Mar 25, 2011 21:25 UTC (Fri) by intgr
In reply to: McGee: The real story behind Arch Linux package signing
Parent article: McGee: The real story behind Arch Linux package signing
then Arch Linux really just nothing more than a hobby OS.
Indeed, that's what it is. Arch Linux has never strived to be an enterprise distribution. What do you expect from a group of 30 developers and almost no funding?
It's sad that there is no package signing yet, but there are numerous other distros that have it. If that's what you need, use those.
Dangerous default permissions? No developer interest! Remote exploit in kernel? No developer interest!
But that's what the developers are interested in. Arch Linux often releases updates on the same day as upstreams — usually faster than even the experimental branches of other distros. There is no delay introduced by back-porting patches, security or otherwise. That's what it's all about, being agile and not overcomplicating things.
to post comments)