Gentoo Archives: gentoo-security

From:	Marius Mauch <genone@g.o>
To:	gentoo-security@l.g.o
Subject:	Re: [gentoo-security] How to authenticate the portage tree
Date:	Mon, 08 Nov 2004 20:06:21
Message-Id:	`20041108210552.6923a7fd@sven.genone.homeip.net`
In Reply to:	[gentoo-security] How to authenticate the portage tree by Peter Simons

1	On 08 Nov 2004 03:41:22 +0100
2	Peter Simons <simons@××××.to> wrote:
3
4	> (1) Run "find /usr/portage -type f \| xargs sha1sum -b" on
5	> the Gentoo main system.
6
7	What's the 'Gentoo main system'?
8
9	> (2) Sign the output with GPG.
10
11	Who does that?
12
13	Basically we do that already with Manifests, just that they
14	don't cover the whole tree (yet).
15
16	Marius
17
18	--
19	Public Key at http://www.genone.de/info/gpg-key.pub
20
21	In the beginning, there was nothing. And God said, 'Let there be
22	Light.' And there was still nothing, but you could see a bit better.