Date: Tue, 29 Nov 2005 12:58:15 -0800 From: Colin Percival <cperciva@freebsd.org> To: aristeu <suporte@wahtec.com.br> Cc: freebsd-security@freebsd.org Subject: Re: Reflections on Trusting Trust Message-ID: <438CC0E7.9020409@freebsd.org> In-Reply-To: <000201c5f526$5a000400$e403000a@rickderringer> References: <000201c5f526$5a000400$e403000a@rickderringer>
next in thread | previous in thread | raw e-mail | index | archive | help
aristeu wrote: >> Can you explain what you mean here. Virtually all distfiles needed to >> build a port have MD5 and maybe SHA-256 hashes embedded in the ports >> tree. The only way to easily circumvent these is to subvert the ports >> tree - which gets back to the issue of trusting the FreeBSD distribution. >> I agree that there's currently no integrity checking on packages. >> (And, BTW, tar has no integrity checks). > > Anyone who is between you and freebsd cvsup server can make his own ports > tree repository. That being done, he just need to redirect your connection > and wait 'til your next cvsup sync is done. This is why I wrote portsnap. Colin Percival
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?438CC0E7.9020409>