On Fri, May 18, 2007 at 04:41:41PM +0200, Gabor Gombas wrote:
On Fri, May 18, 2007 at 09:12:15AM +0200, martin f krafft wrote:Good point. Thus it looks like there is no right way [...]How about making the use of "-k all" configurable?
The point I was trying to make before is that the decision whether "-k all" is sane or not can only be decided per package (and perhaps even per revision). For example, a bad cryptsetup binary written to all available initramfs images means no boot at all. On the other hand, if a security bug would be found in the cryptsetup initramfs scripts, "-k all" would be quite necessary.
-- David Härdeman