Gentoo Archives: gentoo-security

From: "Butterworth
To: "gentoo-security@l.g.o" <gentoo-security@l.g.o>
Subject: [gentoo-security] portage/rsync question
Date: Tue, 06 Apr 2010 20:05:52
Message-Id: 8622C222D2FC9D499533B1EEF631D3930332DB4ABE@IMCMBX1.MITRE.ORG
Hi.  I have a security-related question for Portage/rsync: 

 

If someone makes a change to a copy of a program (say a backdoor added to
apache) hosted on a public mirror, will the sync'ing between the public
mirror and the main rotation mirror determine that it's corrupted (via 'bad'
checksum) on the public-mirror side and replace it? 

 

Thank you in advance,

-john

Attachments

File name MIME type
smime.p7s application/x-pkcs7-signature

Replies

Subject Author
Re: [gentoo-security] portage/rsync question Mansour Moufid <mansourmoufid@×××××.com>
Re: [gentoo-security] portage/rsync question Volker Armin Hemmann <volkerarmin@××××××××××.com>
Re: [gentoo-security] portage/rsync question shimi <shimi@×××××.net>