Date: Sun, 25 Jan 2015 02:47:12 +0100 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Garrett Wollman <wollman@csail.mit.edu> Cc: freebsd-security@freebsd.org Subject: Re: Strange package checksum report Message-ID: <868ugrr5r3.fsf@nine.des.no> In-Reply-To: <21698.32224.747971.146491@khavrinen.csail.mit.edu> (Garrett Wollman's message of "Fri, 23 Jan 2015 11:59:12 -0500") References: <21698.32224.747971.146491@khavrinen.csail.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Garrett Wollman <wollman@csail.mit.edu> writes: > Checking for packages with mismatched checksums: > p5-XML-SAX-0.99_2: /usr/local/lib/perl5/site_perl/XML/SAX/ParserDetails.i= ni This file is updated whenever you install or remove a SAX parser, so this is expected. There are at least half a dozen different Perl SAX implementations in the ports tree. > python27-2.7.9: /usr/local/lib/python2.7/UserDict.pyc > python27-2.7.9: /usr/local/lib/python2.7/_weakrefset.pyc > python27-2.7.9: /usr/local/lib/python2.7/abc.pyc > python27-2.7.9: /usr/local/lib/python2.7/codecs.pyc > python27-2.7.9: /usr/local/lib/python2.7/copy_reg.pyc > python27-2.7.9: /usr/local/lib/python2.7/encodings/__init__.pyc > [ a bunch of other .pyc files elided ] These are Pyhon bytecode files. They are automatically regenerated if you have write access to them and Python thinks they are stale when it tries to load them. Apparently, Python's definition of "stale" is slightly more complex than just comparing timestamps; they are one of the reasons why Baptiste gave up reproducible package builds. Is your clock synchronized with NTP? Is this a VM? What is the underlying filesystem? DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?868ugrr5r3.fsf>