Re: pkg_add (pkg.conf): option to require signed packages

2014-01-17 Thread Sébastien Marie
On Thu, Jan 16, 2014 at 10:02:22AM +, Stuart Henderson wrote: On 2014/01/16 08:53, Sébastien Marie wrote: Hi, Does it make sens to have an option to require package to be signed ? It makes more sense to just enable that by default, when we are happy with the infrastructure and

Re: pkg_add (pkg.conf): option to require signed packages

2014-01-17 Thread Marc Espie
On Fri, Jan 17, 2014 at 09:59:03AM +0100, Sébastien Marie wrote: On Thu, Jan 16, 2014 at 10:02:22AM +, Stuart Henderson wrote: On 2014/01/16 08:53, Sébastien Marie wrote: Hi, Does it make sens to have an option to require package to be signed ? It makes more sense to just

Re: pkg_add (pkg.conf): option to require signed packages

2014-01-16 Thread Stuart Henderson
On 2014/01/16 08:53, Sébastien Marie wrote: Hi, Does it make sens to have an option to require package to be signed ? It makes more sense to just enable that by default, when we are happy with the infrastructure and usage.

pkg_add (pkg.conf): option to require signed packages

2014-01-15 Thread Sébastien Marie
Hi, Does it make sens to have an option to require package to be signed ? Currently, a package without signature is gracefully installed without warning. The patch introduce an option require-signature in pkg.conf, and it respects -Dnosig in comand-line, if present. Thanks. -- Sébastien Marie