List of usigned, yet trusted, items

[marmarek]

Reported by joanna on 13 Sep 2011 22:34 UTC

• KDE
• Nvidia drivers
• Xen patches for xenlinux kernel
  ...

Migrated-From: https://wiki.qubes-os.org/ticket/353

[marmarek]

Comment by joanna on 10 Aug 2012 20:03 UTC
Those few places were we had to trust unsigned sources are clearly marked in the sources in the verify-sources makefile targets, and the actual files we created with hashes for further verification are also clearly marked, like e.g. this one:

http://git.qubes-os.org/?p=joanna/kde-dom0.git;a=commit;h=84506541afccd0c83c048b18e36e63424fac04bb

I think it makes little sense to specifically list them in the wiki.

[marmarek]

Comment by joanna on 10 Aug 2012 20:03 UTC
Those few places were we had to trust unsigned sources are clearly marked in the sources in the verify-sources makefile targets, and the actual files we created with hashes for further verification are also clearly marked, like e.g. this one:

http://git.qubes-os.org/?p=joanna/kde-dom0.git;a=commit;h=84506541afccd0c83c048b18e36e63424fac04bb

I think it makes little sense to specifically list them in the wiki.