Re: Reflections on Trusting Trust

From: Colin Percival (cperciva_at_freebsd.org)
Date: 11/29/05

  • Next message: markzero: "Re: Reflections on Trusting Trust" 
    Date: Tue, 29 Nov 2005 12:58:15 -0800
To: aristeu <suporte@wahtec.com.br>

    aristeu wrote:
    >> Can you explain what you mean here. Virtually all distfiles needed to
    >> build a port have MD5 and maybe SHA-256 hashes embedded in the ports
    >> tree. The only way to easily circumvent these is to subvert the ports
    >> tree - which gets back to the issue of trusting the FreeBSD distribution.
    >> I agree that there's currently no integrity checking on packages.
    >> (And, BTW, tar has no integrity checks).
    >
    > Anyone who is between you and freebsd cvsup server can make his own ports
    > tree repository. That being done, he just need to redirect your connection
    > and wait 'til your next cvsup sync is done.

    This is why I wrote portsnap.

    Colin Percival
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: markzero: "Re: Reflections on Trusting Trust"

    Relevant Pages

    • RE: Reflections on Trusting Trust
      ... > tree - which gets back to the issue of trusting the FreeBSD distribution. ... Anyone who is between you and freebsd cvsup server can make his own ports ... yet, installing a ca-root certificates port, downloading a public key or ... resynching your ports tree implies on network transmission of certificates, ...
      (FreeBSD-Security)
    • Re: [OT] CVSUP (was "Re: Was: Re: Why This Infinite Loop??")
      ... if he is not familiar with the FBSD ports system. ... supposedly an advantage of portsnap. ... The protocol uses no encryption or signing, and any attacker who can intercept the connection can insert arbitrary data into the tree you are updating. ... this means that anyone who can compromise a CVSup mirror can feed arbitrary data to the people who are using that mirror. ...
      (freebsd-questions)
    • Re: Totally lost
      ... There is a target there for "updating" the tree via ... that it's not in the ports. ... what's the difference in using cvsup or portupdate to update the ... (I can only assume that if there's such a thing as 'portupdate', ...
      (freebsd-questions)
    • Re: RE: Portage tree
      ... > have it installed in your system you can install it from ... You can actually update the ports tree in 3 ways I've found and I used them ... A new tree is built after the FTP is completed. ...
      (freebsd-newbies)
    • Re: Driver Update Disk discussion
      ... :> One does not need to patch the source tree at to pick up ports modules ... One can build the ports modules as part of the ... :> kernel by simply defining PORTS_MODULES in a kernel config file. ...
      (freebsd-hackers)