From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Q3zVH-0003u2-2p for garchives@archives.gentoo.org; Sun, 27 Mar 2011 23:36:15 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E3C091C08C; Sun, 27 Mar 2011 23:36:06 +0000 (UTC) Received: from relay01.mx.bawue.net (relay01.mx.bawue.net [193.7.176.67]) by pigeon.gentoo.org (Postfix) with ESMTP id B70021C059 for ; Sun, 27 Mar 2011 23:35:41 +0000 (UTC) Received: from jesper.s.riegger.name (s_riegger_name.tunnel.bawue.de [86.111.250.18]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: stoile_) by relay01.mx.bawue.net (Postfix) with ESMTP id 9469948065 for ; Mon, 28 Mar 2011 01:35:40 +0200 (CEST) Date: Mon, 28 Mar 2011 01:35:35 +0200 From: Philipp Riegger To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] rejecting unsigned commits Message-ID: <20110328013535.271d0e46@jesper.s.riegger.name> In-Reply-To: <4D8FB488.9060605@gentoo.org> References: <4D8FB488.9060605@gentoo.org> X-Mailer: Claws Mail 3.7.8 (GTK+ 2.24.3; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: X-Archives-Hash: 68199b3ef0b533c7613d96e05f6591cf On Sun, 27 Mar 2011 17:04:56 -0500 Jeremy Olexa wrote: > > this is especially important for the people doing arch keywording > > since they make a ton of commits. i'm looking at you armin76. > > One thing I don't get amidst this whole conversation is why I should > sign a Manifest file when committing KEYWORDS or something equally as > trivial like deleting ebuilds. By signing the Manifest, I interpret > that as "yes, I committed this Manifest file and yes I trust every > hash in this Manifest file" when in reality, I have no clue if the > Manifest file is correct because I didn't inspect anything. > > Am I missing something? You sign, that you did this. More or less. The guy before you did the same. If there is an error all previous revisions of the tree are available and you can check, whose mistake it was. Nothing really changes, but I can check whether a gentoo dev committed the change and who it was (and that it was not anybody who hacked some rsync mirror). Philipp --