From owner-freebsd-ports Mon Jan 1 8:39:39 2001 From owner-freebsd-ports@FreeBSD.ORG Mon Jan 1 08:39:37 2001 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from 200-227-201-104-as.acessonet.com.br (200-227-201-104-as.acessonet.com.br [200.227.201.104]) by hub.freebsd.org (Postfix) with ESMTP id AF2B337B400 for ; Mon, 1 Jan 2001 08:39:32 -0800 (PST) Received: (qmail 3436 invoked by uid 1001); 1 Jan 2001 16:38:25 -0000 From: "Mario Sergio Fujikawa Ferreira" Date: Mon, 1 Jan 2001 14:38:03 -0200 To: Kris Kennaway Cc: Wes Peters , "Michael C . Wu" , ports@FreeBSD.ORG, Robert Watson , Warner Losh Subject: Re: Package signing tools Message-ID: <20010101143803.A3416@Fedaykin.here> References: <3A4ED1C0.14061CE5@softweyr.com> <20001231003920.A24519@peorth.iteration.net> <3A4EDCA9.5CEA7114@softweyr.com> <20010101083459.B12422@citusc.usc.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.4i In-Reply-To: <20010101083459.B12422@citusc.usc.edu>; from kris@FreeBSD.ORG on Mon, Jan 01, 2001 at 08:34:37AM -0800 Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Jan 01, 2001 at 08:34:37AM -0800, Kris Kennaway wrote: > On Sun, Dec 31, 2000 at 12:13:45AM -0700, Wes Peters wrote: > > > Yeah, it's a good idea, but this is really a simple standalone program. > > It doesn't prevent you from pkg_add'ing something, you have to chose to > > pkg_check it and see if the result is kosher. It is at this time orthogonal > > to pkg_version. > > Checking the signature should be automatic and part of pkg_add, which > should refuse to add the package if it fails. And, "smart users" should be allowed to bypass this if they wish so. ;) Just like checksum. But, with scarier warnings. -- Mario S F Ferreira - UnB - Brazil - "I guess this is a signature." lioux at ( freebsd dot org | linf dot unb dot br ) flames to beloved devnull@someotherworldbeloworabove.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message