Re: I doubt that this affects FreeBSD, but FYI

From: William Carrel (william.carrel@infospace.com)
Date: 10/09/02 

Date: Wed, 9 Oct 2002 10:05:16 -0700
To: Erick Mechler <emechler@techometer.net>
From: William Carrel <william.carrel@infospace.com>

On Wednesday, October 9, 2002, at 10:01 AM, Erick Mechler wrote:

> :: A quick peer over at CVSweb indicates that the import of 8.12.6 was
> :: done well before the sendmail.org folks got their server fooled
> with.
>
> Additionally, you would have had to explicitly told your build to
> continue
> after it warned you about a mismatch in the MD5 sums. All the more
> reason
> you should really trust the MD5 sums in your distinfo files :)

I was talking about the base system, not ports. I guess I should've
been clearer about that. I don't think the base system checks the MD5
sums during buildworld. But then I have NO_SENDMAIL turned on in
make.conf anyway, so what would I know.

And ports would check the MD5 so, everything is happy. 

-- 
William Carrel
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: md5 checksum server
    ... It's interesting then that we use MD5 sums for ports. ... You might argue ... that the MD5 sum comes from a different source to the source tarball, ...
    (FreeBSD-Security)
  • Re: I doubt that this affects FreeBSD, but FYI
    ... :: A quick peer over at CVSweb indicates that the import of 8.12.6 was ... :: done well before the sendmail.org folks got their server fooled with. ... after it warned you about a mismatch in the MD5 sums. ...
    (FreeBSD-Security)