From owner-cvs-usrsbin Thu Feb 9 20:04:03 1995 Return-Path: cvs-usrsbin-owner Received: (from root@localhost) by freefall.cdrom.com (8.6.9/8.6.6) id UAA29204 for cvs-usrsbin-outgoing; Thu, 9 Feb 1995 20:04:03 -0800 Received: from gndrsh.aac.dev.com (gndrsh.aac.dev.com [198.145.92.241]) by freefall.cdrom.com (8.6.9/8.6.6) with ESMTP id UAA29110; Thu, 9 Feb 1995 20:01:05 -0800 Received: (from rgrimes@localhost) by gndrsh.aac.dev.com (8.6.8/8.6.6) id UAA23191; Thu, 9 Feb 1995 20:00:56 -0800 From: "Rodney W. Grimes" Message-Id: <199502100400.UAA23191@gndrsh.aac.dev.com> Subject: Re: cvs commit: src/usr.sbin/mtree Makefile compare.c create.c misc.c mtree.8 mtree.h spec.c To: jkh@freebsd.org (Jordan K. Hubbard) Date: Thu, 9 Feb 1995 20:00:55 -0800 (PST) Cc: wollman@freefall.cdrom.com, CVS-commiters@freefall.cdrom.com, cvs-usrsbin@freefall.cdrom.com In-Reply-To: <22372.792387972@time.cdrom.com> from "Jordan K. Hubbard" at Feb 9, 95 07:46:12 pm X-Mailer: ELM [version 2.4 PL23] Content-Type: text Content-Length: 1400 Sender: cvs-usrsbin-owner@freebsd.org Precedence: bulk > > > wollman 95/02/09 19:12:48 > > > > Modified: usr.sbin/mtree Makefile compare.c create.c misc.c mtree.8 > > mtree.h spec.c > > Log: > > mtree * MD5 = better security > > > > Idea from: Dr. John T. Wroclawski > > Cool, does that mean that we'll be providing a PGP'd MD5 checksum of > an entire checked out FreeBSD distribution tree (or all the relevant > subportions thereof) for someone to use in verifying the integrity of > a FreeBSD system soon? It's been an oft-requested feature, and you've > just put the groundwork in place for making it really easy to do. > For someone with the time. :) > > Jordan This functionality should be rolled into the ``make release'' process, simply run ``mtree -c -blah -blah -blah'' on the files just before you create the tarball. The selection of -blah -blah should probably be something close to: -i -kuname,gname,mode,size,md5 -n -p pathtorootoftarball I am assuming the md5 stuff was added as a keyword just like the cksum keyword worked, I have not looked at these changes yet, but phk and I had talked about the same thing quite some time back (actually it was more like I asked phk if he could make mtree use MD5 just like it uses cksum). -- Rod Grimes rgrimes@gndrsh.aac.dev.com Accurate Automation Company Custom computers for FreeBSD