[Yum-devel] [PATCH 2/2] Add new urlgrabber option 'csum_type'.
skvidal at fedoraproject.org
Wed Jul 6 15:41:50 UTC 2011
On Wed, 2011-07-06 at 11:27 -0400, James Antill wrote:
> The other problem is that when you start the parallel part of the
> downloading changes, the IO will be happening in another process ... but
> I doubt that we can do the checksum there (due to desired security
> If we _can_ put the checksumming in the helpers, then it might be worth
> the changes due to the fact we can parallelize the checksumming then
If you can shove the expected checksum across to the downloader then you
can get away with it over there - it just means MORE config info to
stuff to shove to the downloader.
checksumming at the downloader then gpg checking inside yum seems
reasonable as a separation, esp considering the security goals.
More information about the Yum-devel