Get Gentoo! |
Robert Buchholz wrote on 03/20/2008 02:07 PM:
> (CVS, core gentoo infra) and then check it on the user side. If you
> want to do this right now, you can change your tree syncing to manually
> download the gpg-signed portage-latest.tar.bz2 tree snapshots from your
> local distfiles mirror and check them.
emerge-webrsync can do the downloading for you. The current version in
svn  should also be able to handle the verification, just note that
the key id changed to 239C75C4 .
Matthias Geerdsen (vorlon)
Gentoo Linux Security Team
Updated Jun 17, 2009
Archive of the gentoo-security mailing list.
Donate to support our development efforts.
Your browser does not support iframes.