>So you personally vouch for the machine code in the official release not >containing any hidden surprises at present?
I don't vouch for anything, I don't have to. If you don't like it go scuttle off to someone else who satisfies you. But your sha256 invocation is going to solve nothing. >By the way there is a bug in >the text of the FAQ for installing the xenocara source that clobbers usr >because it's missing a mkdir -p command for an expected directory. So file a bug report about it. Stop moving the goalposts. I'm done with you.