Previously Marcus Brinkmann wrote: > * Make sure that every *.deb package carries an "Origin:" field! This is so > obvious, and was proposed so many times. But nobody did it using the correct procedure on debian-policy. If suggest you do that so this becomes official? > * Make sure all building tools can use and understand the Origin field. > Make dpkg complain if the origin field is missing or broken. Make sure it > warns if someone tries to install a non-verificable package or a non-Debian > package. And there we have a bit of a problem: we would need to have gpg support inside dpkg and a method to collect public keys to verify the origin. > Comments? Excellent stuff. Try making it happen.. Wichert. -- ============================================================================== This combination of bytes forms a message written to you by Wichert Akkerman. E-Mail: wakkerma@cs.leidenuniv.nl WWW: http://www.wi.leidenuniv.nl/~wichert/
Attachment:
pgpxkoRUQBHwj.pgp
Description: PGP signature