Always store project .rvmrc trust keyed by the full, only slightly mu…

…nged, path

Prune old-style md5-keyed entries during install
Mention all this in notes

scripts/functions/installer

@@ -176,6 +176,9 @@ Upgrade Notes
 
   * rvm_trust_rvmrcs has been changed to rvm_trust_rvmrcs_flag for consistency
 
+  * Project rvmrc files are now checked for trust whenever they change, as promised by
+    the note displayed during the review process
+
   * Ruby package dependency list for your OS is given by:
     rvm notes
 
@@ -421,6 +424,11 @@ setup_configuration_files()
       touch user/rvmrcs
     fi
   fi
+
+  # Prune old (keyed-by-hash) trust entries
+  grep '^_' user/rvmrcs > user/rvmrcs.new
+  mv user/rvmrcs.new user/rvmrcs
+
   popd >/dev/null
 }
 

scripts/functions/rvmrc

@@ -30,12 +30,7 @@ __rvm_md5_for_contents()
 
 __rvm_rvmrc_key()
 {
-  if [[ ${rvm_always_trust_rvmrc_flag:-0} -eq 1 ]]; then
-    printf "$1"
-  else
-    __rvm_md5_for "$1"
-  fi
-
+  printf "$1" | tr '[#/.=]' _
   return $?
 }