[Gnu-arch-users] Re: (fairly minor) SECURITY ISSUE

[Miles Bader]

Miles Bader <address@hidden> writes:
> How about adding, in addition to `=default.check' (or whatever),
> `=default.contents' which should return the contents of the file that
> tla should use.  [could this serve in _place_ of =default.check?]
...
> gpg --decrypt emits:
> 
>    Signature-for: address@hidden/cray--devo--0--patch-55
>    md5 log 1fa0a2ca4ea0dbdf0f4c009f5d8df9b2
>    md5 cray--devo--0--patch-55.patches.tar.gz 18802c6aaa64415d8c70d8f4112c5b90

Hey any comment one this?  It seems like the right solution...

I realized, BTW that you don't need the --decrypt -- just `gpg < foo'
does the same thing.

-Miles
-- 
If you can't beat them, arrange to have them beaten.  [George Carlin]