vsftpd in the news

Przemek Klosowski przemek.klosowski at nist.gov
Wed Jul 6 14:34:55 UTC 2011


On 07/06/2011 03:19 AM, Michael Schwendt wrote:

> If we include the whole show in the src.rpm, how does that add any safety?

It doesn't make the system bulletproof,  but it makes it a little harder 
to break, and, perhaps more importantly, adds accountability, i.e. helps 
to figure out at which point the source was corrupted. Remember the 
original Linux kernel trojan: it was discovered because the bitkeeper 
checksums showed an unaccounted-for chunk.


More information about the devel mailing list