Danek Duvall wrote:
On Wed, Jul 22, 2009 at 07:17:33PM -0700, Bart Smaalders wrote:
I would validate the catalog only when it's extended...
Okay. I wasn't sure. If we wanted to validate against local corruption,
we could always take the hash of the catalog as it sat on disk and store
that, verifying that more frequently than we checked the signature.
The digest route would be my preferred option. I could add a digest to
the attrs file for each catalog.
Cheers,
--
Shawn Walker
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
