[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]


On Wed, 2 Apr 1997, Bruce Perens wrote:

> > The proble left is: The .deb uploaded can be generated by a source not
> > included in the source package. It would be great if gcc placed some kind
> > of signature in binaries...
> But how do you guarantee that someone doesn't pervert gcc?

 Hum.. you're right... I'd better not send this idea to the gcc people..

> > let's make all developers upload only the source versions of their
> > packages! An automated script can compile all the packages in some trusted
> > environment.
> When I last heard, we had some 240 (out of 900) packages not converted to
> the new source format. This gets in the way of automatic compilation.
> Volunteers to work on that are welcome.

 I don't say we would need to recompile all the .deb's... only the newly

 I've poste this to debian-devel, but noboy seeme to like it... and I
still think that it's something we MUST do...

Nicolás Lichtmaier.-  | Try visiting #debian in Undernet (us.undernet.org)
nick@feedback.com.ar  | The channel of the debian developers =)

Reply to: