Fast Version Control System
Many years ago, the GPG signature file was included in the source list¹. A compromise at kernel.org caused the tarballs to move to googlecode.com for a number of releases and the signatures were not provided in an easily downloaded format². When the source location was moved back to kernel.org, the signature file had already been removed from the spec file and was not re-added³. There is an effort underway to make GPG signature verification a requirement when upstream provides signatures⁴. Regardless of whether this becomes a requirement in the packaging guidelines, verification of upstream signatures makes good sense. It also makes the process easier for git package maintainers, who are (or should be ;) doing this manually for each upstream git release. While adding the signatures to the source list, all non-upstream source files were moved to Source10 and above. This should make it easier to add new upstream source files in the future, avoiding the need for tedious (and error-prone) renumbering of existing sources. Remove the unused entry for Patch14 also. ¹ |
||
---|---|---|
.gitignore | ||
git-1.7-el5-emacs-support.patch | ||
git-1.8-gitweb-home-link.patch | ||
git-cvsimport-Ignore-cvsps-2.2b1-Branches-output.patch | ||
git-gui.desktop | ||
git-infinite-loop.patch | ||
git-init.el | ||
git.conf.httpd | ||
git.socket | ||
git.spec | ||
git.xinetd.in | ||
git@.service | ||
gitweb.conf.in | ||
gpgkey-junio.asc | ||
sources |