[Pbuilder-maint] your blog entry on secure pbuilder.

[Junichi Uekawa]

Hi,

I've read your post.

http://www.enricozini.org/blog/eng/trusted-pbuilder.html

are you sure that's enough ?  That seems to be just when creating the
initial chroot.


Untrusted packages will be installed regardless since pbuilder will
call apt-get with options to force installation.



There are several things that need to be done

1. filing a bug on cdebootstrap to support --keyring option
 (does that install gnupg inside chroot as well?)

2. filing a bug on pbuilder to request support.



regards,
	junichi
-- 
dancer@{debian.org,netfort.gr.jp}   Debian Project