| 1 |
On Thu, Sep 29, 2011 at 05:11:59PM +0200, Patrick Lauer wrote: |
| 2 |
> Another point: Currently we do NOT sign eclasses and profiles. |
| 3 |
> So before such a policy becomes mandatory we need to figure out how to |
| 4 |
> handle that, otherwise we can't enforce it |
| 5 |
And this is EXACTLY why I wrote the tree-signing GLEPS. |
| 6 |
|
| 7 |
MetaManifest solves the problem over covering the entire tree with |
| 8 |
signatures, WITHOUT requiring any specific action from developer. |
| 9 |
|
| 10 |
-- |
| 11 |
Robin Hugh Johnson |
| 12 |
Gentoo Linux: Developer, Trustee & Infrastructure Lead |
| 13 |
E-Mail : robbat2@g.o |
| 14 |
GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 |
Archives