Re: debsums for maintainer scripts (was: Re: Revival of the signed debs discussion)
-----BEGIN PGP SIGNED MESSAGE-----
On Mon, Dec 01, 2003 at 06:08:28PM +0100, Eduard Bloch wrote:
> - current md5sums file in control.tar.gz should contain
> checksums of really all files
Unfortunately many Maintainers do not use "dh_md5sums" to ship
an .md5sums File in their Package(s). This makes it harder to
check the already installed Files on a Debian installation.
I think, at least Packages like "dpkg" or "gnupg" should call
"dh_md5sums". I was wondering, if it would be usefull to make
a mass bug-filling against these Packages. Before, it would be
nice to have a List of Packages (maybe sorted by Maintainer)
which do not call "dh_md5sums".
IMHO Lintian should also check if "dh_md5sums" is called and
print at least a warning if this is not the case.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
-----END PGP SIGNATURE-----