Messages in this thread | | | Date | Thu, 28 Nov 2002 10:54:36 +0100 | From | Helge Hafting <> | Subject | Re: Verifying Kernel source |
| |
Larry McVoy wrote:
> > > If it's in BK you can be pretty sure that it is what was checked in, > > > BK checksums every diff in every file. It's not at all impossible > > > to fool the checksum but it is very unlikely that you can cause > > > semantic differences in the form of a trojan horse and still fool > > > the checksums.
> The bottom line is that, so far, the BK tree is safe.
Sure, it is hard to _fake_ bk, but how about someone cracking a machine? Couldn't they check in a trojan using the normal check-in procedures?
Helge Hafting - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |