Subject: Re: add builder and build date to +BUILD_INFO
To: Jeremy C. Reed <firstname.lastname@example.org>
From: Michal Pasternak <email@example.com>
Date: 10/09/2003 01:40:26
Jeremy C. Reed [Wed, Oct 08, 2003 at 04:10:22PM -0700]:
> Sometimes I think it would be useful to know what machine and what the
> build date was for a package.
> What do you think about have +BUILD_INFO include a BUILDER field with
> user@hostname:/path/to/pkgsrc and a BUILD_DATE field with the time and
> date of .install_done ??
It's no use. When I build package from pkgsrc, I know it was build by me. If
I download package from netbsd.org, I know it was build by NetBSD
developers. It is really easy to fake such information.
However, packages could be somehow signed (PGP? GnuPG?), so you could know
then, who *really* built them.
Michal Pasternak :: http://pasternak.w.lub.pl