[pacman-dev] [PATCH] makepkg: rework --skip-integ

[Jeff]

On Tue, Oct 27, 2009 at 05:33:41PM +1000, Allan McRae wrote:
> 
> Patch [2] makes the --skipinteg option to cause makepkg to actually 
> "skip integ"rity checks and so no error relating to integrity checks 

That sounds exactly like what I would expect skipinteg to mean.

> Patch [1] extends the --skipinteg option allow the generation of a 
> source tarball without requiring the checking of the integrity checks 

You've given the what, but what is the why? If the source integrity is
flawed, then the generated source package is flawed. This seems like
something that should be safeguarded against, IMO.

> Similarly, a user could distribute a PKGBUILD with wrong dependencies
> and we do not enforce the checking of those.

That is programatically much more difficult to enforce, and even if not,
ISTM that a near-equivalent analogy would be saying that since you can't
defend your house from nuclear strike, you might as well not defend it
from break-ins.

-- 
Jeff

My other computer is an abacus.