From 499a07864178c1c185bef33255ca1c80f3f628f7 Mon Sep 17 00:00:00 2001
From: Ansgar Burchardt <ansgar@debian.org>
Date: Mon, 27 Apr 2015 14:13:05 +0200
Subject: [PATCH] Document how to import additional sources into the security
 archive.

---
 docs/debian-specific | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/debian-specific b/docs/debian-specific
index 49723985..ff0ed3b4 100644
--- a/docs/debian-specific
+++ b/docs/debian-specific
@@ -12,3 +12,12 @@ DEBIAN-SPECIFIC NOTES                                  -*- mode: Org -*-
 - dcmd mv -n bla.changes ../unchecked
 - /srv/security-master.debian.org/dak/config/debian-security/cron.unchecked
 - cronon
+** Built-Using
+Source packages referred to via Built-Using need to be included in the
+security archive:
+
+- Obtain & verify .dsc
+- dak import built-using updates/<component> <.dsc...>
+
+If the .dsc is signed by an old key no longer in the keyring, use
+--ignore-signature. Make extra sure the .dsc is correct.
-- 
2.39.2