diff --git a/apparmor-2.8.0.tar.gz.asc b/apparmor-2.8.0.tar.gz.asc
new file mode 100644
index 0000000..db61be0
--- /dev/null
+++ b/apparmor-2.8.0.tar.gz.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (GNU/Linux)
+
+iEYEABECAAYFAk/HrnMACgkQgTeYuayTEnFRoACg0069+gY/ch0yFXmK5opivw0V
+0/IAn01Dd7Ea2dMjGa/mBjJM5THOWMml
+=pEkp
+-----END PGP SIGNATURE-----
diff --git a/apparmor.changes b/apparmor.changes
index 8241ced..a60eceb 100644
--- a/apparmor.changes
+++ b/apparmor.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Dec  3 20:58:04 UTC 2012 - opensuse@cboltz.de
+
+- verify tarball with gpg-offline
+
 -------------------------------------------------------------------
 Tue Sep 25 13:55:56 UTC 2012 - coolo@suse.com
 
diff --git a/apparmor.keyring b/apparmor.keyring
new file mode 100644
index 0000000..b70c1b2
--- /dev/null
+++ b/apparmor.keyring
@@ -0,0 +1,50 @@
+pub   1024D/AC931271 2006-02-13 [expires: 2014-02-15]
+uid                  AppArmor Development Team (AppArmor signing key) <apparmor@lists.ubuntu.com>
+uid                  AppArmor Development Team (AppArmor signing key) <apparmor-dev@forge.novell.com>
+sub   4096g/79C0E55B 2006-02-13 [expires: 2011-02-12]
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+
+mQGiBEPw2O4RBAD8PZ+0NfCEIBjuDXQjdb6vi642wRIrN7v67GTfNQ+uggGKESRe
+grFumlArz5MbJVLinyIsCqigwyBpspXeyP6cMrzTudmmwQJJN9caejoAu5029wjX
+WTrfwsPbqavwcQSfZlVJOKjLplUCzOcb808UOMYISz5mZmFGzfJpPLTMtwCg4CH+
+e9ZoyqMz1GrkPqjWeOVHgjMD/1D/PW8c1DzBar6zaxNXtQOLtlWn5eqLwWJX7XhG
+DM2YPD0vWyPYnx/5agg6YyouO6xiNi4lPDvEUu8+PqHHZz7Cl9Iu36ruAuhc87vQ
+U10frmHHcdNoko/aetFfNSrXwD+mEhhrob0kIEEIe4K+KfTPKC+aQuUVwciuDiM1
++7ukA/46YWHIwkqFCUzjhJwu5hb4kGeYS1bcMrD5xCMcVzUdJPFcmz1AVclwAZ61
+PYRRUs4xOJ5QeQty/1n4L5ylOJ8mfzXartC4ZY0OqDrXgLg/HhxPfvLfKvZ9xvBq
+AIIJeqGmN2Dq/+Q70kA/5Ck4hUABBoTMQZABWQkCh3POwMCwhbRMQXBwQXJtb3Ig
+RGV2ZWxvcG1lbnQgVGVhbSAoQXBwQXJtb3Igc2lnbmluZyBrZXkpIDxhcHBhcm1v
+ckBsaXN0cy51YnVudHUuY29tPohqBBMRCgAqAhsDAh4BAheAAhkBBQsJCAcDBRUK
+CQgLBRYCAwEABQJNXEDoBQkPDwJtAAoJEIE3mLmskxJxVFgAnjSeh2O03PKF0UJz
+T13Fn1yK1IvaAJ9bQ3EuAw03b/RkIQUx5SQSXyDDdLRQQXBwQXJtb3IgRGV2ZWxv
+cG1lbnQgVGVhbSAoQXBwQXJtb3Igc2lnbmluZyBrZXkpIDxhcHBhcm1vci1kZXZA
+Zm9yZ2Uubm92ZWxsLmNvbT6IZwQTEQIAJwIbAwIeAQIXgAULCQgHAwUVCgkICwUW
+AgMBAAUCTVxBAwUJDw8CbQAKCRCBN5i5rJMScQA9AJ9S5QhjNyhTMenrFysAVe8C
+qziLRgCfVwP9EU7hWMZVHB4I56YG26Z66NG5BA0EQ/DbBhAQAIGpFSylXH+UNf/z
+71UcvcRGIy62qNu3jq49/Tv0RapP03sdh/XZrWQKTeXlw6OHJFog673lvICqd8C5
+O8/2QeE8+c4HjO1QdwUlY5ziYkxOEs3+HgA0RNpWH7tZCAYFf+LB1J8FxTG9uUYf
+ZOBN+2UQPo6aui+9cbRpqhzfTkFCqI8/U0Q3sJ8183Toj4iUTSx8SMeVNixZnMMe
+9nb0yAynQPIvdZ5aOCNFQTjL/LCJFbvtY54n3xuI3DKBs2RinO9ARvGXF4GZ2IfM
+IwsW+pfbf4g+ZVW0bRiT7aJ41H3OIvgDEYT5W9q4AwaTJUtkMT5tNWnGtgZFtbuI
+wM3NfjQVJRUsUNYVC1Zphp+FYAeYLhQeK29a7i1jFJDn1GVBRotPGQ96nhKo62Ka
+vkOSAIZ35cVjVSDsZ7xwZW0awOUUxwZsvZJ+iUGcYGClYk5PH46a9+w8m/THC/uM
+savn8nWFANLCyUnoP7zapu7UtyrQbDfbyoj04rU9X2/gwM9FYJVf+CZOh+FVjzY2
+iUWHaofK2UnXEF1FCY0mWQx021IezmuZd97D32mq7tc3z7oXI3nCV97a0tWZI319
+ewlJjLf1syHj+ODDm7ZLbCXal9C2hrIDEjj/zsI6+d5x3NctTmRS/0nDujByZ2A2
+Vc9N5lvVR8wfGWC3QPgUgVIgR+0vAAQND/43Jbw/cnJbQDzVphv6toJlvATi3GmJ
+o34g2f7FooNcNgN8qIJSBg195ddCtZWlyI0LQzt68pV2cNsf3wWrJQITm0LGmq13
+D4nWLqN4da0F08vtMLIaTFPe1dR+l0FQyiZbxGo8kuo9D4nY0tT78V42hdMA+vL6
+VybHyuvZrYSITNXEBaC5VI8+Bs57XzqoUFrduDCJPstykQoc1jdtV1x2wbaBYZRT
+MFOkqNLYBgoMFV2aJtYzXWZ4XIcv9RJNsLF8bHXehV/NJ+0RjSeSKh8NnxO5PLDe
+gBrmsX9xQ1UiTjG+AKcR/O5Oww1sQbkUbpXrvXzRziodyJzsbAB28MtZY4NgQFp5
+eV502aXM2o5DtDLsR6l+uFrAWK3zAdnbaco8ehqZQ3ILi+vfaVblrNIjKulbOLIC
+WkeOuJ7NVn1MJCstq4grawy8JzZXQjkULVKHVcfcJJqfBuzs4QEWwzhuromsI5FQ
+DKxaz9brdu6izrP/N/zygjCf4kNYf3rHyVqmpcVT718EJeQOZ8u0KVsexuHMi8cn
+fFb8LFPOxzJ5/G7oQ4/0AC7GQgLWrhqjPcNRkWN351XDSgpaA4KAcv8xpqRUgDKO
+DmW4+MvlZ7de+TFkNyh1cWJMG7I82WIA2FjDgTvAZVeNcUnPLKljPF5u/hFM27JO
+oYJCqg/kdmEr3ohPBBgRAgAPBQJD8NsGAhsMBQkJZgGAAAoJEIE3mLmskxJx04gA
+oK91aD8BBVjrm7gTPHI/+3xlrZjdAJwKmYhHdKq+HotT//yKq6SYn/EiOA==
+=Cn3y
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/apparmor.spec b/apparmor.spec
index db30ef6..d187b5e 100644
--- a/apparmor.spec
+++ b/apparmor.spec
@@ -49,12 +49,15 @@ Summary:        AppArmor userlevel parser utility
 License:        GPL-2.0+
 Group:          Productivity/Networking/Security
 Source0:        apparmor-%{version}.tar.gz
-Source1:        %{name}-profile-editor.png
-Source2:        %{name}-profile-editor.desktop
-Source3:        update-trans.sh
+Source1:        apparmor-%{version}.tar.gz.asc
+Source2:        %{name}.keyring
 
-# profile for winbindd (bnc#748499, not upstreamed yet)
-Source4:        usr.sbin.winbindd
+Source3:        %{name}-profile-editor.png
+Source4:        %{name}-profile-editor.desktop
+Source5:        update-trans.sh
+
+# profile for winbindd (bnc#748499, submitted upstream 2012-11-06, trunk r2078)
+Source10:       usr.sbin.winbindd
 
 # enable caching of profiles (= massive performance speedup when loading profiles)
 Patch1:         apparmor-enable-profile-cache.diff
@@ -97,6 +100,7 @@ BuildRequires:  pcre-devel
 BuildRequires:  pkg-config
 BuildRequires:  python
 %if 0%{?suse_version} > 1220
+BuildRequires:  gpg-offline
 BuildRequires:  texlive-amsfonts
 BuildRequires:  texlive-cm-super
 %endif
@@ -408,6 +412,7 @@ SubDomain.
 %endif
 
 %prep
+%{?gpg_verify:  %gpg_verify %{S:1}  }
 %setup -q
 %patch1 -p1
 %patch2 -p0
@@ -424,9 +429,9 @@ SubDomain.
 %endif
 %endif
 
-# profile for winbindd (bnc#748499, not upstreamed yet)
+# profile for winbindd (bnc#748499, submitted upstream 2012-11-06, trunk r2078)
 test ! -e profiles/apparmor.d/usr.sbin.winbindd
-cp %{SOURCE4} profiles/apparmor.d/
+cp %{SOURCE10} profiles/apparmor.d/
 
 %build
 export SUSE_ASNEEDED=0