quoting brendan kehoe brendan zen org as a workaround the various distributions could use a gpg singature to verify correctness of the file since the distributor s secret key is required to create that signature it would add a pretty significant step that would have to be taken to make it possible to replace both a rpm or apt file and its accompanying signature there are complex problems inherent in attempts to implement this URL cheers my pid is inigo montoya you kill NUMBER rick moen my parent process prepare to vi rick URL irish linux users group ilug URL URL for un subscription information list maintainer listmaster URL 