View previous topic :: View next topic |
Author |
Message |
Tae_kyon n00b
Joined: 19 Apr 2006 Posts: 71
|
Posted: Sat Aug 27, 2016 9:39 am Post subject: Hack attempt into gentoo git repository or my desktop? |
|
|
I'm a bit worried because on doing eix-sync yesterday (I'm using git) a strange thing happened: sync wouldn't go through, and taking a quick look it seemed that there had been no changes to the tree - which, after 24 hours, was unlikely but not impossible. This morning the same thing happened, but on reading the message carefully there was a sentence saying that sync couldn't go through because I had supposedly changed
dev-libs/klibc/Manifest
I deleted this file, and eix-sync then worked normally.
Needless to say I did not change the klibc/Manifest file at any moment. But I'm wondering, how could such a thing happen? A mistake or bug in klibc ebuild? Or a malicious attempt to change the git tree? Or someone hacked into my system (but why change klibc Manifest?)
... _________________ We shall not cease from exploration. And the end of all our exploring
will be to arrive where we started and know the place for the first time |
|
Back to top |
|
|
Ant P. Watchman
Joined: 18 Apr 2009 Posts: 6920
|
Posted: Mon Aug 29, 2016 10:53 am Post subject: |
|
|
If you really want to be safe, you need to use webrsync-gpg or verify things by hand. sync=git does *not* check the GPG signatures on the tree. |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|