|
|
@@ -1724,7 +1724,7 @@ Instructs Setup to proceed to comparing time stamps (last write/modified time) i
|
|
|
<li><p>When used with the <tt>external</tt> flag, Setup will verify the source file during the installation process while it is being copied to the destination directory. Files are always created with temporary names (<tt>*.tmp</tt>) initially. If the verification fails, the temporary file will be deleted and an error message will be displayed (with Skip, Try Again, and Cancel options). If the verification succeeds, the temporary file will be renamed to the correct destination name.</p>
|
|
|
<p>When a file entry with the <tt>external</tt> flag is skipped (i.e., not installed), the source file isn't copied anywhere, so no verification takes place.</p></li>
|
|
|
</ul>
|
|
|
-<p>Since verification occurs while source files are being compressed/copied, and not in a separate pass, each file's contents are only read once. Thus, enabling verification has little performance impact; the only extra I/O comes from reading the tiny <tt>.issig</tt> files. This approach also ensures there is no TOCTOU problem; each source file is kept open the entire time it is being compressed/copied and verified without allowing other processes write access.</p>
|
|
|
+<p>Since verification occurs while source files are being compressed/copied, and not in a separate pass, each file's contents are only read once. Thus, enabling verification has little performance impact; the only extra I/O comes from reading the tiny <tt>.issig</tt> files. This approach also ensures there is no Time-Of-Check to Time-Of-Use (TOCTOU) problem; each source file is kept open the entire time it is being compressed/copied and verified without allowing other processes write access.</p>
|
|
|
<p>This flag cannot be combined with the <tt>sign</tt> or <tt>signonce</tt> flags. Use <tt>signcheck</tt> instead.</p>
|
|
|
</flag>
|
|
|
<flag name="isreadme">
|
Martijn Laan