From 00ec563bd9c3437ddb4d0d87803fc7610703f34c Mon Sep 17 00:00:00 2001
From: NIN101 <NIN101@quitesimple.org>
Date: Sun, 5 Apr 2015 12:56:17 +0200
Subject: [PATCH] signature of buildroot is not detached. checksums must be
 checked manually

---
 HACKING | 1 +
 1 file changed, 1 insertion(+)

diff --git a/HACKING b/HACKING
index d03aef5..65ba729 100644
--- a/HACKING
+++ b/HACKING
@@ -37,6 +37,7 @@ subdirectory named 'buildroot-2013.02'.
   $ wget http://www.buildroot.org/downloads/buildroot-2013.02.tar.bz2.sign
   $ gpg --recv-keys B025BA8B59C36319
   $ gpg --verify buildroot-2013.02.tar.bz2.sign
+  $ compare the checksums in buildroot-2013.02.tar.bz2.sign with the actual checksums of buildroot-2013.02.tar.bz2 (it's not a detached signature)
   $ tar --extract --bzip --file buildroot-2013.02.tar.bz2
 
 Buildroot's prerequisites are documented in the "System requirements" section