On Sun, Dec 17, 2017 at 12:12 PM, Linus Torvalds
<torvalds@xxxxxxxxxxxxxxxxxxxx> wrote:
>
> Also, all of these commits were committed less than an hour before
> sending me the pull request, so I question the kind of testing they
> got..
Oh, and equally importantly, it's an unsigned pull request from a
non-secured site, so I think I'll skip this.
Yes, yes, I've allowed these guys, and haven't really enforced it, but
the rule for the last year or so has been that if it's not something
where I have good reason to trust the repository integrity (ie
kernel.org), I require signed tags for pull requests.
I note that the watchdog pulls I have from Guenter _are_ signed (and
also from kernel.org). And I don't have Wim's key in my keyring at
all, so presumably they've never been signed, but can we please start
doing that? Git signed tags are pretty darn simple to use.
Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-watchdog" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
