Re: Goswin von Brederlow in <[🔎] 87u1428mvx.fsf@mrvn.homelinux.org>
> The md5sum files inside the package as they are now can be generated
> at install time by anyone who wishes to have them. Security wise they
> are useless and for accidental corruption they are redundant (since
> they can be generated at install time).
They are not generated by apt/dpkg, so few people will actually build
them. Since accidental corruption only occurs accidentally, it would be
very convenient if the md5sums were already there if something crashes.
Besides that, if the md5sums are in the package, you can check whether
the installation went fine.
> Thus they just waste space and bandwith.
I don't see where a text file with one line per file installed wastes
more resources than {pick anything for a package you don't need, e.g.
95% of translated manpages, etc.}.
Christoph
--
Christoph Berg <cb@df7cb.de>, http://www.df7cb.de/
Wohnheim D, 2405, Universität des Saarlandes, 0681/9657944
Attachment:
signature.asc
Description: Digital signature