Gentoo Archives: gentoo-dev

From: Jeremy Olexa <darkside@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] rejecting unsigned commits
Date: Sun, 27 Mar 2011 22:06:10
Message-Id: 4D8FB488.9060605@gentoo.org
In Reply to: [gentoo-dev] rejecting unsigned commits by Mike Frysinger
1 On 03/24/2011 04:59 PM, Mike Frysinger wrote:
2
3 > this is especially important for the people doing arch keywording
4 > since they make a ton of commits. i'm looking at you armin76.
5
6 One thing I don't get amidst this whole conversation is why I should
7 sign a Manifest file when committing KEYWORDS or something equally as
8 trivial like deleting ebuilds. By signing the Manifest, I interpret that
9 as "yes, I committed this Manifest file and yes I trust every hash in
10 this Manifest file" when in reality, I have no clue if the Manifest file
11 is correct because I didn't inspect anything.
12
13 Am I missing something?
14
15 Thanks,
16 Jeremy

Replies

Subject Author
Re: [gentoo-dev] rejecting unsigned commits Philipp Riegger <lists@××××××××××××.de>