Re: RFC: Consequences of redesign of .deb signatures

Richard Lewis <richard.lewis.debian-gM/[email protected]> Tue, 02 Sep 2025 13:37:09 +0100
Newsgroups gmane.linux.debian.devel.dpkg.general,gmane.linux.debian.devel.general
Message-ID <[email protected]>
Guillem Jover <[email protected]> writes:

> The current support for .deb signatures (as implemented by debsigs
> and debsig-verify, which dpkg can be configured to call by disabling
> the «no-debsig» configuration option), has multiple limitations.

>  whether current features/misdesigns would disappear which are being
> relied on).

i think the answer might be no, but; do system checkers like debsums,
rkhunter, tiger, aide, tripwire etc do any checks using signatures?

(chkrootkit and checksecurity would not care)