1 |
On Thu, Mar 24, 2011 at 06:08:53PM -0400, Olivier Crête wrote: |
2 |
> On Thu, 2011-03-24 at 17:59 -0400, Mike Frysinger wrote: |
3 |
> > is there any reason we should allow people to commit unsigned |
4 |
> > Manifest's anymore ? generating/posting/enabling a gpg key is |
5 |
> > ridiculously easy and there's really no excuse for a dev to not have |
6 |
> > done this already. |
7 |
> |
8 |
> I didn't know we still allowed that.. I guess the CVS server should just |
9 |
> reject unsigned Manifests.. |
10 |
|
11 |
Reject, and email an alias of folk who will go fix the manifest. Keep |
12 |
in mind since it's a two stage commit for cvs, the checksums are left |
13 |
out of sync if we just flat out reject unsigned manifests and ignore |
14 |
the fallout. |
15 |
|
16 |
~brian |