Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757568AbdLQVUU (ORCPT ); Sun, 17 Dec 2017 16:20:20 -0500 Received: from mail-io0-f175.google.com ([209.85.223.175]:34546 "EHLO mail-io0-f175.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757336AbdLQVUS (ORCPT ); Sun, 17 Dec 2017 16:20:18 -0500 X-Google-Smtp-Source: ACJfBosj73jQZ45PeWyAe3jTY10ZC45R3yFrKKa0frJ88jUY1MMj6wftgVUurgN5prCIW4j9gTxZUJDQkSQvo0YaC0s= MIME-Version: 1.0 In-Reply-To: References: <20171217105558.GA6260@infomag.iguana.be> From: Linus Torvalds Date: Sun, 17 Dec 2017 13:20:17 -0800 X-Google-Sender-Auth: nyPScTGaHB3_54PIKWz2kDlbnNg Message-ID: Subject: Re: [GIT PULL REQUEST] watchdog - v4.15 Fixes To: Wim Van Sebroeck Cc: Andrew Morton , LKML , Linux Watchdog Mailing List , Guenter Roeck Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 896 Lines: 21 On Sun, Dec 17, 2017 at 12:12 PM, Linus Torvalds wrote: > > Also, all of these commits were committed less than an hour before > sending me the pull request, so I question the kind of testing they > got.. Oh, and equally importantly, it's an unsigned pull request from a non-secured site, so I think I'll skip this. Yes, yes, I've allowed these guys, and haven't really enforced it, but the rule for the last year or so has been that if it's not something where I have good reason to trust the repository integrity (ie kernel.org), I require signed tags for pull requests. I note that the watchdog pulls I have from Guenter _are_ signed (and also from kernel.org). And I don't have Wim's key in my keyring at all, so presumably they've never been signed, but can we please start doing that? Git signed tags are pretty darn simple to use. Linus