Re: [Rd] R 3.0.1: wrong MD5 checksums for Windows?
On 13-05-18 5:37 PM, Duncan Murdoch wrote: On 13-05-17 2:01 PM, Tal Galili wrote: Hello dear R-devel, I am not sure if this issue is tracked or not, but in case it isn't: It appears that R 3.0.1 reproduces the error reported for R 3.0.0 here: http://r.789695.n4.nabble.com/R-3-0-0-wrong-MD5-checksums-for-Windows-td4663348.html That is, that when installing R 3.0.1 on Windows 7, and then running: require(tools) checkMD5sums(dir=R.home()) It produces the error: files ‘etc/Rconsole’, ‘etc/Rprofile.site’ have the wrong MD5 checksums [1] FALSE Technically speaking, that's just a message, not an error. Those files were changed by the installer, so the information is correct. From a user point of view, it does look like an error. We could avoid the message in several ways: don't bother checking those files, or compute the MD5 checksums on default installed versions of those files, or recompute the checksums after installation. I think the third choice is too hard, so it's not something I'd do. I don't know which of the other two is better. A malicious attacker could do a lot of damage by messing with the Rprofile.site file; maybe a user would want to know if that had happened. So that suggests the second choice. But then users who don't choose whatever default the installer picks will always get the message. I think the problem of a malicious attacker is pretty far-fetched, but an accidental change might be worth noting, so I've put the second choice in place in R-devel and R-patched. Duncan Murdoch __ R-devel@r-project.org mailing list https://stat.ethz.ch/mailman/listinfo/r-devel
Re: [Rd] R 3.0.1: wrong MD5 checksums for Windows?
Thanks for the response Peter. I am dealing with this since I'm trying to indicate to the user if they had their R installed properly or not, when upgrading R through the installr package. I think I'll simply remove these checks manually in the installr package. Still, for the long run, it makes more sense to me to do as you propose and simply stip those files from the checksums. With regards, Tal Contact Details:--- Contact me: tal.gal...@gmail.com | Read me: www.talgalili.com (Hebrew) | www.biostatistics.co.il (Hebrew) | www.r-statistics.com (English) -- On Sat, May 18, 2013 at 12:11 PM, peter dalgaard pda...@gmail.com wrote: On May 17, 2013, at 20:01 , Tal Galili wrote: Hello dear R-devel, I am not sure if this issue is tracked or not, but in case it isn't: It appears that R 3.0.1 reproduces the error reported for R 3.0.0 here: http://r.789695.n4.nabble.com/R-3-0-0-wrong-MD5-checksums-for-Windows-td4663348.html That is, that when installing R 3.0.1 on Windows 7, and then running: require(tools) checkMD5sums(dir=R.home()) It produces the error: files âetc/Rconsoleâ, âetc/Rprofile.siteâ have the wrong MD5 checksums [1] FALSE As has been pointed out before, it is pretty much a non-issue. The Windows installer ships with md5 sums for some local configuration files and if they are locally configured or touched by the installer, the checksums will not match. checkMD5sums is for package checking, it is not documented to be used for checking R.home(). Perhaps the Windows maintainer could strip those files from the checksums, but I wouldn't put it on high priority. -- Peter Dalgaard, Professor, Center for Statistics, Copenhagen Business School Solbjerg Plads 3, 2000 Frederiksberg, Denmark Phone: (+45)38153501 Email: pd@cbs.dk Priv: pda...@gmail.com [[alternative HTML version deleted]] __ R-devel@r-project.org mailing list https://stat.ethz.ch/mailman/listinfo/r-devel
Re: [Rd] R 3.0.1: wrong MD5 checksums for Windows?
On 13-05-17 2:01 PM, Tal Galili wrote: Hello dear R-devel, I am not sure if this issue is tracked or not, but in case it isn't: It appears that R 3.0.1 reproduces the error reported for R 3.0.0 here: http://r.789695.n4.nabble.com/R-3-0-0-wrong-MD5-checksums-for-Windows-td4663348.html That is, that when installing R 3.0.1 on Windows 7, and then running: require(tools) checkMD5sums(dir=R.home()) It produces the error: files ‘etc/Rconsole’, ‘etc/Rprofile.site’ have the wrong MD5 checksums [1] FALSE Technically speaking, that's just a message, not an error. Those files were changed by the installer, so the information is correct. From a user point of view, it does look like an error. We could avoid the message in several ways: don't bother checking those files, or compute the MD5 checksums on default installed versions of those files, or recompute the checksums after installation. I think the third choice is too hard, so it's not something I'd do. I don't know which of the other two is better. A malicious attacker could do a lot of damage by messing with the Rprofile.site file; maybe a user would want to know if that had happened. So that suggests the second choice. But then users who don't choose whatever default the installer picks will always get the message. Duncan Murdoch __ R-devel@r-project.org mailing list https://stat.ethz.ch/mailman/listinfo/r-devel
[Rd] R 3.0.1: wrong MD5 checksums for Windows?
Hello dear R-devel, I am not sure if this issue is tracked or not, but in case it isn't: It appears that R 3.0.1 reproduces the error reported for R 3.0.0 here: http://r.789695.n4.nabble.com/R-3-0-0-wrong-MD5-checksums-for-Windows-td4663348.html That is, that when installing R 3.0.1 on Windows 7, and then running: require(tools) checkMD5sums(dir=R.home()) It produces the error: files âetc/Rconsoleâ, âetc/Rprofile.siteâ have the wrong MD5 checksums [1] FALSE With regards, Tal Contact Details:--- Contact me: tal.gal...@gmail.com | Read me: www.talgalili.com (Hebrew) | www.biostatistics.co.il (Hebrew) | www.r-statistics.com (English) -- [[alternative HTML version deleted]] __ R-devel@r-project.org mailing list https://stat.ethz.ch/mailman/listinfo/r-devel
