Archives
Archives
| From: | "Butterworth |
|---|---|
| To: | "gentoo-user@l.g.o" <gentoo-user@l.g.o> |
| Subject: | [gentoo-user] Portage + checksums |
| Date: | Tue, 06 Apr 2010 18:16:25 |
| Message-Id: | 8622C222D2FC9D499533B1EEF631D3930332DB4A02@IMCMBX1.MITRE.ORG |
| 1 | How can I verify that the installed packages on a Gentoo system came from |
| 2 | the same source that was on a main rotation mirror and/or "blessed" by the |
| 3 | Gentoo development team? |
| 4 | |
| 5 | |
| 6 | |
| 7 | By verifying the checksum located in /var/db/pkg/$APPNAME/CONTENTS am I |
| 8 | only confirming that the source was the same as that which was downloaded |
| 9 | from the mirror? |
| 10 | |
| 11 | |
| 12 | |
| 13 | I guess what I'm getting at is how can I be sure I can trust a mirror? |
| 14 | |
| 15 | |
| 16 | |
| 17 | Thank you very much in advance for any insight provided, |
| 18 | |
| 19 | -john |
| File name | MIME type |
|---|---|
| smime.p7s | application/x-pkcs7-signature |
| Subject | Author |
|---|---|
| Re: [gentoo-user] Portage + checksums | "Albert W. Hopkins" <marduk@×××××××××××.org> |