[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: debsums for maintainer scripts

On Thu, 4 Dec 2003 19:30:12 +0100, Javier Fernández-Sanguino Peña <jfs@computer.org> said: 

> Why do we have to make each of our users find a solution to generate
> this from a _local_ mirror (or the system's .deb archive which
> shoulnd't be trusted in the event of an intrusion) when we could do
> this ourselves and provide the results?

	I have no objections to Debian providing md5sums, as  long as
 we do not ignore our users running Debian in low disk space
 environments -- like zaurii. As long as these files are not in a deb,
 and are not mandated to live in /var/lib/dpkg/info; feel free.

> Notice that I'm not necessarily depending on the local md5sums, I'm
> taking a file provided by a vendor, in this case, Debian. Let's call
> it Contents-xxx.md5sum.gz.  This file is available for download from
> all Debian mirrors, signed with the Release key and provides these
> three fields for every file in a single Release:



panic: kernel trap (ignored)
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

Reply to: