source audit

[Matthew D Truch]

In the case of gpsd, your file reports:

BAD_CVS_SOURCE:gpsd-2.34.tar.gz:gpsd

But gpsd-2.34.tar.gz is not in cvs, it's in the lookaside cache.  And
furthermore, the md5sum between the file in the lookaside cache matches
the file pointed to by the Source: URL in the spec file.  

-- 
"Things should be made as simple as possible, but not any simpler. -- Einstein."
--------------------------
Matthew Truch
Department of Physics and Astronomy
University of Pennsylvania
matt at truch.net
http://matt.truch.net/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20070824/026419ce/attachment.sig>