Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Dec 2000 12:47:34 -0500
From:      Will Andrews <will@physics.purdue.edu>
To:        Warner Losh <imp@village.org>
Cc:        Will Andrews <will@physics.purdue.edu>, Peter Pentchev <roam@FreeBSD.org>, ports@FreeBSD.org, kris@FreeBSD.org, security-officer@FreeBSD.org
Subject:   Re: cvs commit: ports/databases/gigabase distinfo
Message-ID:  <20001214124734.I1873@puck.firepipe.net>
In-Reply-To: <200012141726.KAA48452@harmony.village.org>; from imp@village.org on Thu, Dec 14, 2000 at 10:26:20AM -0700
References:  <20001214122157.G1873@puck.firepipe.net> <200012141225.eBECPn385434@freefall.freebsd.org> <20001214122157.G1873@puck.firepipe.net> <200012141726.KAA48452@harmony.village.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Dec 14, 2000 at 10:26:20AM -0700, Warner Losh wrote:
> Actually, I see a good reason for noting it.  In the past there have
> been sites that have been compromized and the new checksum alerted
> people to the trojan.  That's why we need to make sure that when
> checksums change, they are on purpose.  Noting that fact in the commit 
> log (but maybe not to the level of detail) is prudent and saves the SO 
> from having to wonder if we've just introduced a trojan into our
> system.

OK, but the author really should have documented it himself.. I did say
that if the author hasn't done this part, then it's probably not worth
upgrading.  Although I see the point in doing this anyway, I hope people
save themselves the time by using the script in ports/Tools.

-- 
wca


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001214124734.I1873>