Re: Verifying Kernel source

Helge Hafting (helgehaf@aitel.hist.no)
Thu, 28 Nov 2002 10:54:36 +0100


Larry McVoy wrote:

> > > If it's in BK you can be pretty sure that it is what was checked in,
> > > BK checksums every diff in every file. It's not at all impossible
> > > to fool the checksum but it is very unlikely that you can cause
> > > semantic differences in the form of a trojan horse and still fool
> > > the checksums.

> The bottom line is that, so far, the BK tree is safe.

Sure, it is hard to _fake_ bk, but how about someone cracking
a machine? Couldn't they check in a trojan using
the normal check-in procedures?

Helge Hafting
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/