On Mon, 24 Oct 2005 22:32:46 +0100
Jonathan Wright wrote:

> - Second, run the digest command. You'll need to do this if it's not in 
> the standard portage tree and it's something you have added. Portage 
> needs to be told all the files within the tree and their md5 values, to 
> make sure nothing bad gets in :)

And by running emerge --digest <target> or ebuild <target.ebuild> digest
screws the digest system, because it substitutes the values you got from
the portage mirror with the values from the files on your computer. It
destroys any safety that the digest system offers.

So if someone has broken into your system and screwed around with the
portage tree so that when you install sylpheed-claws it does something
nasty, running the digest command will allow that to happen.

If the digests are wrong find out what the problem is!

-- 
Nick Rout <[EMAIL PROTECTED]>

-- 
gentoo-user@gentoo.org mailing list

Reply via email to