User: Password:
|
|
Subscribe / Log in / New account

Arch Linux and (the lack of) package signing

Arch Linux and (the lack of) package signing

Posted Mar 24, 2011 19:48 UTC (Thu) by vapier (subscriber, #15768)
In reply to: Arch Linux and (the lack of) package signing by tetromino
Parent article: Arch Linux and (the lack of) package signing

hmm, should be trivial to start enforcing manifest signing in the main tree. it's trivial to setup keys after all.

$ find *-* -maxdepth 2 -name Manifest | wc -l
14438
$ find *-* -maxdepth 2 -name Manifest -exec grep -l 'BEGIN PGP SIGNATURE' {} + | wc -l
6032

that is fairly abysmal ...


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds