From owner-freebsd-stable  Fri Jul 20 18:38:59 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from wall.polstra.com (rtrwan160.accessone.com [206.213.115.74])
	by hub.freebsd.org (Postfix) with ESMTP id 653E037B403
	for <stable@freebsd.org>; Fri, 20 Jul 2001 18:38:56 -0700 (PDT)
	(envelope-from jdp@wall.polstra.com)
Received: from vashon.polstra.com (vashon.polstra.com [206.213.73.13])
	by wall.polstra.com (8.11.3/8.11.1) with ESMTP id f6L1cnq84209;
	Fri, 20 Jul 2001 18:38:49 -0700 (PDT)
	(envelope-from jdp@wall.polstra.com)
Received: (from jdp@localhost)
	by vashon.polstra.com (8.11.3/8.11.0) id f6L1cm330620;
	Fri, 20 Jul 2001 18:38:48 -0700 (PDT)
	(envelope-from jdp)
Date: Fri, 20 Jul 2001 18:38:48 -0700 (PDT)
Message-Id: <200107210138.f6L1cm330620@vashon.polstra.com>
To: stable@freebsd.org
From: John Polstra <jdp@polstra.com>
Cc: allbery@ece.cmu.edu
Subject: Re: probably remote exploit
In-Reply-To: <9230000.995663981@vpn88.ece.cmu.edu>
References: <Pine.LNX.3.96.1010720174942.651C-100000@kremilek.gyrec.cz> <20010720141820.C47930@peitho.fxp.org> <20010720140331.A12903@freeway.dcfinc.com> <9230000.995663981@vpn88.ece.cmu.edu>
Organization: Polstra & Co., Seattle, WA
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

In article <9230000.995663981@vpn88.ece.cmu.edu>,
Brandon S. Allbery KF8NH <allbery@ece.cmu.edu> wrote:
> On Friday, July 20, 2001 14:03:31 -0700, "Chad R. Larson" <chad@DCFinc.com> 
> wrote:
> +-----
> | > unless, of course, they trojaned the build tools :/  a full reinstall
> | > is the best bet.
> |
> | Yes, but the CVSup will notice if any of the sources don't match the
> | repository, and the subsequent buildworld will regenerate all the
> | binaries.
> +--->8
> 
> Not if cvsup itself has been trojaned.

Cool, that would be one of the first code contributions ever for
CVSup. :-)

John
-- 
  John Polstra                                               jdp@polstra.com
  John D. Polstra & Co., Inc.                        Seattle, Washington USA
  "Disappointment is a good sign of basic intelligence."  -- Chögyam Trungpa


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message