On 02/21/12 13:15, Alan Coopersmith wrote:
On 02/21/12 01:06 PM, Shawn Walker wrote:
I can't guard against that; this isn't about cryptographic-security.
This is
about general identity.
So should it be a package level attribute or a publisher level one?
Is it sort of a higher level in the hierarchy than publisher? One
entity may have many publishers containing many packages? (It seems
like it's what "publisher" should mean, given more typical English
usage, but I think we've gone too far down the path of publisher having
a more specialized subset meaning for pkg.)
What should the attribute be for pkg://solaris/driver/graphics/nvidia -
Oracle or Nvidia?
Oracle's the one that "published" the package.
So arguably, Oracle.
-Shawn
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
