Brian Nelson <pyro@debian.org> writes: > It's the reason why Debian has a maintainer application process, > requires new maintainer gpg keys to be signed by existing developers, > and requires all uploads to be gpg signed by a key in the Debian > keyring. Of course this doesn't prevent a Debian developer from doing > evil things, but it makes it possible to track and permanently ban > whoever did the evil things. I don't think that he's talking about official sources, judging by the subject. -- Paul Johnson <baloo@ursine.ca> Linux. You can find a worse OS, but it costs more.
Attachment:
pgpH1JN08Tk5L.pgp
Description: PGP signature