Ken Moffat wrote: > Actually, the situation is worse than that! For most packages > in the BLFS book, the md5sum was generated by an editor. > I'm sure the gentoo sha sums are similar.
It's slightly better than that. The editor puts the checksum in the book, but I check them when the package is loaded on the mirror master. That's two independent verifications. It doesn't check as much the original package, but it does check that the mirror package is the same one the editor used. -- Bruce -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
