Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Wed, 6 Nov 2002 16:32:45 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Wed, 6 Nov 2002 16:32:45 -0500 Received: from mail.cert.uni-stuttgart.de ([129.69.16.17]:26280 "EHLO Mail.CERT.Uni-Stuttgart.DE") by vger.kernel.org with ESMTP id ; Wed, 6 Nov 2002 16:32:40 -0500 To: jamesclv@us.ibm.com Cc: Gilad Ben-ossef , Linux Kernel Mailing List Subject: Re: One for the Security Guru's References: <20021023130251.GF25422@rdlg.net> <1035380716.4323.50.camel@irongate.swansea.linux.org.uk> <1035381547.4182.65.camel@klendathu.telaviv.sgi.com> <200210231514.07192.jamesclv@us.ibm.com> Mail-Followup-To: jamesclv@us.ibm.com, Gilad Ben-ossef , Linux Kernel Mailing List From: Florian Weimer Date: Wed, 06 Nov 2002 22:39:18 +0100 In-Reply-To: <200210231514.07192.jamesclv@us.ibm.com> (James Cleverdon's message of "Wed, 23 Oct 2002 15:14:07 -0700") Message-ID: <87bs529y49.fsf@Login.CERT.Uni-Stuttgart.DE> User-Agent: Gnus/5.090008 (Oort Gnus v0.08) Emacs/21.2 (i386-debian-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 799 Lines: 19 James Cleverdon writes: > Be surprised: I run "gpg --verify foo.tgz.sign foo.tgz" every time I download > from kernel.org. And, "rpm --checksig *.rpm" on stuff from redhat.com too. > > Given the recent trojaned source packages, I recommend that everyone do the > same. Aren't the signatures on kernel.org automatically generated? -- Florian Weimer Weimer@CERT.Uni-Stuttgart.DE University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/ RUS-CERT fax +49-711-685-5898 - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/