From: | "Butterworth |
---|---|
To: | "gentoo-user@l.g.o" <gentoo-user@l.g.o> |
Subject: | [gentoo-user] Portage + checksums |
Date: | Tue, 06 Apr 2010 18:16:25 |
Message-Id: | 8622C222D2FC9D499533B1EEF631D3930332DB4A02@IMCMBX1.MITRE.ORG |
1 | How can I verify that the installed packages on a Gentoo system came from |
2 | the same source that was on a main rotation mirror and/or "blessed" by the |
3 | Gentoo development team? |
4 | |
5 | |
6 | |
7 | By verifying the checksum located in /var/db/pkg/$APPNAME/CONTENTS am I |
8 | only confirming that the source was the same as that which was downloaded |
9 | from the mirror? |
10 | |
11 | |
12 | |
13 | I guess what I'm getting at is how can I be sure I can trust a mirror? |
14 | |
15 | |
16 | |
17 | Thank you very much in advance for any insight provided, |
18 | |
19 | -john |
File name | MIME type |
---|---|
smime.p7s | application/x-pkcs7-signature |
Subject | Author |
---|---|
Re: [gentoo-user] Portage + checksums | "Albert W. Hopkins" <marduk@×××××××××××.org> |