Chris Bainbridge wrote:
It is a single signature across the entire portage tree. It means that after rsync emerge can check the signature against the retrieved tree to validate the whole tree (or overlay).
This idea has been brought up before and shot down. Signing the whole tree does not work, since we allow users to only sync parts of the tree.
-- Andrew Gaffney http://dev.gentoo.org/~agaffney/ Gentoo Linux Developer Installer Project -- gentoo-dev@gentoo.org mailing list