Date: Sun, 25 Jan 2015 11:29:46 +0100 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Garrett Wollman <wollman@bimajority.org> Cc: freebsd-security@freebsd.org Subject: Re: Strange package checksum report Message-ID: <86y4orp2zp.fsf@nine.des.no> In-Reply-To: <21700.23803.911745.834275@hergotha.csail.mit.edu> (Garrett Wollman's message of "Sat, 24 Jan 2015 22:03:23 -0500") References: <21698.32224.747971.146491@khavrinen.csail.mit.edu> <868ugrr5r3.fsf@nine.des.no> <21700.23803.911745.834275@hergotha.csail.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Garrett Wollman <wollman@bimajority.org> writes: > Dag-Erling Smørgrav <des@des.no> writes: > > These are Pyhon bytecode files. They are automatically regenerated if > > you have write access to them and Python thinks they are stale when it > > tries to load them. Apparently, Python's definition of "stale" is > > slightly more complex than just comparing timestamps; they are one of > > the reasons why Baptiste gave up reproducible package builds. > That's unfortunate. Well, it's a bug. I assume that you're using official packages and don't have a locally compiled Python interpreter or anything like that? Could you perhaps turn on auditing in order to find out what's touching these files? DES -- Dag-Erling Smørgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86y4orp2zp.fsf>