Deltarpm xz problem with PPC generated rpms?
Bruno Wolff III
bruno at wolff.to
Mon Sep 14 19:19:17 UTC 2009
On Mon, Sep 14, 2009 at 20:29:11 +0300,
Jonathan Dieter <jdieter at gmail.com> wrote:
>
> Sorry, forgot to mention, another option would be to sign the
> *uncompressed* data in an rpm, so if the compressed data was different,
> it wouldn't matter.
Uncompressing hostile data isn't always a good idea. It is preferable to
sign the compressed data when that is what you are handing out.
More information about the fedora-devel-list
mailing list