Gentoo Archives: gentoo-portage-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-portage-dev@l.g.o
Subject: [gentoo-portage-dev] Re: [gentoo-commits] proj/portage:master commit in: bin/
Date: Tue, 13 Sep 2011 04:38:58
On Tue, Sep 13, 2011 at 03:20:35AM +0000, Zac Medico wrote:
> commit: 677240f7b3db66bdcd403c214e5d3fa30e31a24a > Author: Zac Medico <zmedico <AT> gentoo <DOT> org> > AuthorDate: Tue Sep 13 03:20:00 2011 +0000 > Commit: Zac Medico <zmedico <AT> gentoo <DOT> org> > CommitDate: Tue Sep 13 03:20:00 2011 +0000 > URL:;a=commit;h=677240f7 > > repoman: don't sign thin manifests > > Thin manifests imply reliance on the VCS for file integrity, > which implies that manifest signatures are not needed.
This is only true after the VCS has signed commits. If the VCS does not have signed commits, then we should have this signature. -- Robin Hugh Johnson Gentoo Linux: Developer, Trustee & Infrastructure Lead E-Mail : robbat2@g.o GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85