At 6:45 Uhr -0500 19.12.2002, Kyle Moffett wrote:
On Wednesday, Dec 18, 2002, at 18:29 US/Eastern, Patrick N�f wrote:
I only thought to add ***new*** MD5 sums where they are missing.
Something along the lines of
find /sw/fink/10.2 -name *.info -exec fgrep -Hic source-md5 {} \; | grep :0$
I would group the work by maintainer and, when I have finished a
group, send the maintainer an email with a list of what I added to
which .info files. I think this should be appropriate.
You might first check if the group that distributes the software
provides an MD5 sum, if it is different from the package, then maybe
notify them to see if they know about it.
Indeed, although that is more work of course. In the meantime, it
wouldn't hurt if everybody run "fink checksums" from time to time,
and analyze any checksum failure. I.e distinguish between
1) you version of the file was bad (fixed by a "fink fetch")
2) even a "fink fetch" doesn't help. then either
- the MD5 simply was wrong
- either your or the version of the pkg maintainer was modified.
That can have multiple reasons of course (an attack, a "silent"
update, a non-versioned source URL etc.).
In case 2), the maintainer should be notified.
I think that is an task that anybody with some time at their hands
and the interest for it can do. So if you want to contribute and
don't know how to, that's be nice.
The next step would be run modify the package validator to warn for
packages that do not specify an MD5 sum. In addition, extending the
validator with stuff like "fink validate-all" or "fink validate
--tree=unstable" or "fink validate --maintainer='Max Horn'" would be
useful... but alas that's just ideas, and as long as nobody has the
interest/time/knowledge to do it, it'll not happen :-/ (maybe I will
get a chance to sit down between christmas and new year to work on
Fink, and do this myself).
Max
--
-----------------------------------------------
Max Horn
Software Developer
-------------------------------------------------------
This SF.NET email is sponsored by: Geek Gift Procrastinating?
Get the perfect geek gift now! Before the Holidays pass you by.
T H I N K G E E K . C O M http://www.thinkgeek.com/sf/
_______________________________________________
Fink-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/fink-devel
