Arch Linux

Defre

Member

Registered: 2007-08-11

Posts: 7

Web Of Trust

Hi,

I use Arch since a few years but I have never seen any check of pacman index itself. I use kdemod for instance, and I never had to add some key to check package db validity. So I wonder if pacman has any way to ensure that database (and checksums) wasn't modified during download ?

Thanks .

skottish

Forum Fellow

From: Here

Registered: 2006-06-16

Posts: 7,942

Re: Web Of Trust

Hi,

I use Arch since a few years but I have never seen any check of pacman index itself. I use kdemod for instance, and I never had to add some key to check package db validity. So I wonder if pacman has any way to ensure that database (and checksums) wasn't modified during download ?

Thanks .

This is a subject that comes up fairly frequently. Search the forums for 'pacman signing' for the most recent lengthy discussion.

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,672

Website

Re: Web Of Trust

http://wiki.archlinux.org/index.php/Pac … ge_Signing

We need more code, less talk...

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!