From: Jeremy Blosser <jblosser-smgl AT firinn.org>
To: sm-commit AT lists.ibiblio.org
Subject: Re: [SM-Commit] GIT changes to master grimoire by Ladislav Hagara (ad0a24226e43aeb1ac12e792c02e31f3011852c4)
Date: Fri, 11 May 2007 11:06:22 -0500
On May 11, Ladislav Hagara [ladislav.hagara AT unob.cz] wrote:
> If vendor changes sources we find out it by our hash or by our own
> signature.
> If vendor changes sources and also changes signature we do not discover it!
Then store the upstream signature for the release in the grimoire itself.
Is there something preventing this from happening? It's been suggested
many times.