You are right. ebuilds fetch source codes from the sites of their respective authors. As far as I know, Gentoo does not maintain patches to apply to those source codes. As a consequence, programs that raise subtle issues (such as those listed at http://libreplanet.org/wiki/List_of_software_that_does_not_respect_the_Free_System_Distribution_Guidelines ) would probably be installed unaltered despite the settings I mentioned. If the problematic parts of the software can be disabled at compile/build time, then there may be a keyword to append to USE to do so. "deblob" plays this role for the kernel only.

As for verifiable builds, I do not see the necessity given that a user of Gentoo receives source codes (minus the blobs) that she compiles on her own system.

Reply via email to