3 ms·
>However, it's also useful to note that the potential damage of cracking kernel.org is far less than typical software repositories What about code that's hoste
by cooldeal 15y ago
>However, it's also useful to note that the potential damage of cracking kernel.org is far less than typical software repositories
What about code that's hosted on kernel.org itself? Isn't kernel.org a source for the public to get the kernel and not git?
http://www.kernel.org/pub/ http://www.kernel.org/pub/
ftp://ftp.kernel.org/pub/
rsync://rsync.kernel.org/pub/
It would be easy for the exploiter to insert trojaned/rootkitted kernels into those places.
- KonradKlause 15y agoCurrently all files get verified. The kernel.org admins have digital signatures of all files...
- Torn 15y agoHopefully those signatures aren't on the compromised machines?
- KonradKlause 15y agoOf course not. As one of the users@kernel.org members I can tell you that the kernel.org admins are very competent.