On Mon, 21 Sep 2009, Marc Haber wrote: > And people know that the package is built automatically. All users I > know especially opted in to using the package instead of freshclam for > some-or-other reason.
WHERE is that information published? I don't see it in the package description, and I don't see it in volatile.d.o either. It is not even in the for-developers page. Was it somehow lost or misplaced in the web pages? Or is it just inside the package, or in a blog somewhere, or in a mailing-list post somewhere? Those would not give that information anywhere near the necessary exposal to people who are considering installing the package for the first time. > > If someone has network access to fetch > >clamav-data, he also has network access to fetch the signatures, so he could > >run the "create-clamav-data" utility instead... > > This assumption is wrong. I am honestly curious about this one. Look, I don't have anything against gatekeeper procedures being put in place to keep the current way clamav-data is built, although I *still* don't understand why clamav-data is necessary, and therefore I don't understand either why it would warrant so much effort and complexity [to do it right]. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
