On Thu, May 10, 2012 at 3:44 PM, Julien Pivotto <[email protected]> wrote: > Indeed. But I can't not imagine something like: > > CHECKSUMS="${MY_PNV}.tar.gz 098f6bcd4621d373cade4e832627b4f6"
What's so bad about that? Every the package is bumped, the maintainer makes sure to check if his tarball is trojan'd, and if not, put in the proper sha1 sum to that field. _______________________________________________ Exherbo-dev mailing list [email protected] http://lists.exherbo.org/mailman/listinfo/exherbo-dev
