diff options
| author | Paul Moore <paul@paul-moore.com> | 2020-01-06 21:32:16 -0500 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2020-01-06 21:32:16 -0500 |
| commit | e5c4b5ee8086b936d28b080e5477950f632b4d43 (patch) | |
| tree | b235fc08fe4e402cec4c87066b08a0b93d7f8138 /README.md | |
| parent | 1ecdddb2a5b61cf527d1f238f88a9d129239f87a (diff) | |
| download | libseccomp-e5c4b5ee8086b936d28b080e5477950f632b4d43.tar.gz | |
doc: add a section on release tarball signatures to README.md
Reviewed-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 18 |
1 files changed, 18 insertions, 0 deletions
@@ -63,6 +63,24 @@ CHANGELOG files. Those who are interested in contributing to the the project are encouraged to read the CONTRIBUTING in the top level directory. +## Verifying Release Tarballs + +Before use you should verify the downloaded release tarballs and checksums +using the detached signatures supplied as part of the release; the detached +signature files are the "*.asc" files. If you have GnuPG installed you can +verify detached signatures using the following command: + + # gpg --verify file.asc file + +At present, only the following keys are authorized to sign official libseccomp +releases: + + Paul Moore <paul@paul-moore.com> + 7100 AADF AE6E 6E94 0D2E 0AD6 55E4 5A5A E8CA 7C8A + + Tom Hromatka <tom.hromatka@oracle.com> + 47A6 8FCE 37C7 D702 4FD6 5E11 356C E62C 2B52 4099 + ## Building and Installing the Library If you are building the libseccomp library from an official release tarball, |