Am 22.12.2011 11:26, schrieb Allan McRae:
> Use to override the global SigLevel value for upgrade operations.
> 
> e.g. when installing a package without a signature:
> 
> Fails to install:
> SigLevel = Optional
> UpgradeSigLevel = Required
> 
> Fails to install:
> SigLevel = Required
> 
> Installs:
> SigLevel = Required
> UpgradeSigLevel = Optional
> 
> Installs:
> SigLevel = Optional

I'll repeat some things that I said in the bug report - I have no idea
if this is feasible and should be done now:

I would love to distinguish between -U <local file> and -U <URL>. The
rationale is that I want automatically the highest security when I
download something (meaning: 'Required' for -U <URL>) but more
convenience when installing a local package that I build from AUR and
thus never signed (meaning: 'Optional' for -U <local file>).

If you think this is too hard for now, I think that this patch is better
than nothing.

Apart from that, I find the name UpgradeSigLevel confusing: People might
think it refers to upgrades in general, as opposed to the pacman
'upgrade' operation.

Attachment: signature.asc
Description: OpenPGP digital signature



Reply via email to