mirror of
https://github.com/moparisthebest/pacman
synced 2025-01-09 04:57:59 -05:00
a4120f2015
In order to be fully secure, we can't only sign packages. We also need to sign our repository metadata to prevent database falsification, dependency injection, etc. Add an '-s/--sign' option that allows this functionality, and will generate a .sig file side-by-side with the package database. While at it, fix the issue where a signature file would never be found because of 'cd' madness (this needs fixing in another commit). Signed-off-by: Dan McGee <dan@archlinux.org> |
||
---|---|---|
.. | ||
.gitignore | ||
Makefile.am | ||
makepkg.sh.in | ||
pacman-db-upgrade.sh.in | ||
pacman-optimize.sh.in | ||
pkgdelta.sh.in | ||
rankmirrors.sh.in | ||
repo-add.sh.in |