[gentoo-security] Re: No, apparently not.

[Peter Simons]

Ed Grimm writes:

 > Would the obvious fix not be provide signed Manifest
 > files for the eclasses as well?

Yes, that would fix the problem. However, if you want to
make sure your tree is properly authenticated, you have
authenticate _every single file_ in it. In a day and age
where people can hack your machine by setting appropriate
pixels in a GIF image, I wouldn't take any unnecessary
risks. Having dozens of signatures split over dozens of
directories is not a (human-)failure-resistant procedure,
IMHO.

I am also not quite certain yet how to bootstrap the system
securely. For example: Where does the properly authenticated
GPG ebuild come from?

Anyway, if all files are covered by the manifests, then it
would be secure.

Peter


--
gentoo-security@g.o mailing list