mirror of
https://github.com/moparisthebest/pacman
synced 2025-01-10 13:28:12 -05:00
a4120f2015
In order to be fully secure, we can't only sign packages. We also need to sign our repository metadata to prevent database falsification, dependency injection, etc. Add an '-s/--sign' option that allows this functionality, and will generate a .sig file side-by-side with the package database. While at it, fix the issue where a signature file would never be found because of 'cd' madness (this needs fixing in another commit). Signed-off-by: Dan McGee <dan@archlinux.org> |
||
---|---|---|
.. | ||
.gitignore | ||
asciidoc.conf | ||
Doxyfile | ||
footer.txt | ||
index.txt | ||
libalpm.3.txt | ||
Makefile.am | ||
makepkg.8.txt | ||
makepkg.conf.5.txt | ||
pacman.8.txt | ||
pacman.conf.5.txt | ||
PKGBUILD-example.txt | ||
PKGBUILD.5.txt | ||
repo-add.8.txt | ||
submitting-patches.txt | ||
translation-help.txt | ||
vercmp.8.txt |