Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Portage does more security checks? Digest verification fails
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2  
Reply to topic    Gentoo Forums Forum Index Portage & Programming
View previous topic :: View next topic  
Author Message
Pizentios
n00b
n00b


Joined: 28 Feb 2005
Posts: 26
Location: Brandon, Manitoba, Canada

PostPosted: Wed Aug 17, 2005 7:34 pm    Post subject: Reply with quote

same thing just happened to me doing a

Code:

#emerge --update --deep --newuse world


it was erroring out while trying to emerge the new version mozilla web browser. I tried the instructions above, but none of them got me anywhere.

so i guess i'll just have to run it with FEATURES=-strict in make.conf
_________________
-Pizentios
Back to top
View user's profile Send private message
cz0
Apprentice
Apprentice


Joined: 13 Jun 2005
Posts: 171
Location: /earth/russia/moscow

PostPosted: Fri Aug 19, 2005 4:25 pm    Post subject: Security Violation... Reply with quote

Jast unpacked portage-20050817.tar.bz2 to my /usr, so now having problems with
Code:

Security Violation: A file exists that is not in the manifest.
Traing to fix with a script..but seems something going wrong:
Code:

rsync error: syntax or usage error (code 1) at main.c(816)
/root/./shotsync: line 36: --exclude=/distfiles: No such file or directory
/root/./shotsync: line 37: --exclude=/local: No such file or directory

---15 min---
Now having this:
Code:

>>> Updating Portage cache:   87% * Please upgrade your package (gentoo-sources-2.4.20-r33) to use toolchain-funcs.eclass
QA Notice: sed in global scope: sys-kernel/gentoo-sources-2.4.20-r33
100%

 * An update to portage is available. It is _highly_ recommended
 * that you update portage now, before any other packages are updated.
 * Please do so and then update ALL of your configuration files.

TUX usr # emerge sys-libs/cracklib
Calculating dependencies ...done!
>>> emerge (1 of 1) sys-libs/cracklib-2.8.3-r1 to /
*** Adjusting cvs-src permissions for portage user...
!!! Security Violation: A file exists that is not in the manifest.
!!! File: files/digest-cracklib-2.8_pre1-r1

Any solutions?
FEATURES="-strict" works, but it is unsecure.
How fix if?
Back to top
View user's profile Send private message
slycordinator
Advocate
Advocate


Joined: 31 Jan 2004
Posts: 3050
Location: Houston, TX

PostPosted: Mon Oct 10, 2005 6:18 am    Post subject: Reply with quote

vonhelmet wrote:
I've just run into this problem with files not listed in the manifest.

I don't have a net connection at home, so I download snapshots and distfiles at work. I "sync" by untarring the whole tree over the /usr/portage directory. This isn't a real sync, as old files aren't deleted, which then causes problems because there's loads of old ebuilds and stuff that aren't in the manifest.

Anyone got any suggestions on how I can "sync" without running into this manifest problem? For the time being I've been deleting all the files in portage (except distfiles and a couple of others) and untarring the new tarball in the nearly empty directory. I'm thinking I might try to put together a perl script that will "sync" with a tarball offline in some way, but that sounds a bit complex to me.


Since your "sync" is merely downloading a snapshot and unpacking the portage tree... couldn't you change the way you do it to first delete the old portage tree?

You could do
Code:
rm -rf /usr/portage/*  && tar -xvjpf portage-version.tar.bz2 -C /usr/portage


Also this would (with a default configuration) delete your distfiles. So the way to avoid this is to have your distfiles stored somewhere else. Like you could create a directory called "/usr/portage_distfiles" and then in /etc/make.conf you put this line "DISTDIR=/usr/portage_distfiles"
Back to top
View user's profile Send private message
lukas.svoboda
n00b
n00b


Joined: 15 Feb 2005
Posts: 33
Location: Prague, CZ

PostPosted: Tue Nov 01, 2005 9:15 am    Post subject: Shotsync bug? Reply with quote

mikenerone wrote:

# Make sure user and group file ownership is root
chown -R 0:0 portage


shouldn't this be chown -R 0:0 $TMPDIR/portage ???
I have the shotsync.sh script placed in my home, of course it cannot find any portage directory there to chown it ;)
I think the dicerctory that should be chowned is $TMPDIR/portage = /usr/tmp/shotsync/portage

Lukas.
Back to top
View user's profile Send private message
mikenerone
n00b
n00b


Joined: 11 Feb 2004
Posts: 17
Location: San Antonio, TX

PostPosted: Wed Jul 14, 2010 7:31 am    Post subject: Reply with quote

Wow - blast from the past. Yep, you're right. I fixed the post so that bug doesn't bite anyone else who might grab this thing.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Portage & Programming All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum