Re: debsums for maintainer scripts (was: Re: Revival of the signed debs discussion)

[Michael Ablassmeier <abi@grinser.de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hi Eduard,

On Mon, Dec 01, 2003 at 06:08:28PM +0100, Eduard Bloch wrote:
>  - current md5sums file in control.tar.gz should contain
>    checksums of really all files

Unfortunately many Maintainers do not use "dh_md5sums" to ship
an .md5sums File in their Package(s). This makes it harder to
check the already installed Files on a Debian installation.

I think, at least Packages like "dpkg" or "gnupg" should call
"dh_md5sums". I was wondering, if it would be usefull to make
a mass bug-filling against these Packages. Before, it would be
nice to have a List of Packages (maybe sorted by Maintainer)
which do not call "dh_md5sums".

IMHO Lintian should also check if "dh_md5sums" is called and
print at least a warning if this is not the case.

bye,
    - michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/y4vFEFV7g4B8rCURAg3/AJ9/V2KIlAGrago22dg27YiJxu4IBACdHDne
TAYfYnISDbUXRkkHuDTGpoA=
=V33R
-----END PGP SIGNATURE-----