On Tue, Oct 27, 2009 at 05:33:41PM +1000, Allan McRae wrote:
Patch [2] makes the --skipinteg option to cause makepkg to actually "skip integ"rity checks and so no error relating to integrity checks
That sounds exactly like what I would expect skipinteg to mean.
Patch [1] extends the --skipinteg option allow the generation of a source tarball without requiring the checking of the integrity checks
You've given the what, but what is the why? If the source integrity is flawed, then the generated source package is flawed. This seems like something that should be safeguarded against, IMO.
Similarly, a user could distribute a PKGBUILD with wrong dependencies and we do not enforce the checking of those.
That is programatically much more difficult to enforce, and even if not, ISTM that a near-equivalent analogy would be saying that since you can't defend your house from nuclear strike, you might as well not defend it from break-ins. -- Jeff My other computer is an abacus.