[gobolinux-devel] [RFC] SignProgram/VerifyProgram

[Carlo Calica]

On Thu, May 8, 2008 at 4:26 PM, Lucas C. Villa Real
<lucasvr at gobolinux.org> wrote:
>
> An obvious fix is to simply ignore the errors if the offending file is
> a symlink, as proposed in this patch. Is it ok to commit this, or do
> you want to think in a more elaborated solution? (I'm ok with this
> one)
>

The elaborate solution would be to store the symlink dest in FileHash.
 Then the signature could verify that.  But I don't see that being a
very large gain.  Do these symlinks stay within the package or do they
cross package boundaries?


-- 
Carlo J. Calica