[lkml]   [2002]   [Nov]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: One for the Security Guru's
James Cleverdon <> writes:

> Be surprised: I run "gpg --verify foo.tgz.sign foo.tgz" every time I download
> from And, "rpm --checksig *.rpm" on stuff from too.
> Given the recent trojaned source packages, I recommend that everyone do the
> same.

Aren't the signatures on automatically generated?

Florian Weimer Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT fax +49-711-685-5898
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:30    [W:0.069 / U:0.908 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site