[gentoo-user] Portage + checksums

2010-04-06 Thread Butterworth, John W.
How can I verify that the installed packages on a Gentoo system came from the same source that was on a main rotation mirror and/or "blessed" by the Gentoo development team? By verifying the checksum located in /var/db/pkg/$APPNAME/CONTENTS am I only confirming that the source was the same a

RE: [gentoo-user] Portage + checksums

2010-04-06 Thread Butterworth, John W.
ins [mailto:mar...@letterboxes.org] Sent: Tuesday, April 06, 2010 2:24 PM To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Portage + checksums On Tue, 2010-04-06 at 14:15 -0400, Butterworth, John W. wrote: > How can I verify that the installed packages on a Gentoo system came > from the

RE: [gentoo-user] Portage + checksums

2010-04-07 Thread Butterworth, John W.
So to avoid "spamming" with 20+ Thank You emails I'll send out just one and thank you all collectively for the information provided (I hope this isn't rude - I'm not sure of proper protocol in this situation). I have a lot more insight now and some new ideas of where I need to look to learn more