Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff

[Andrew Suffield]

On Fri, Dec 26, 2003 at 11:15:11PM -0500, James Blackwell wrote:
> During a we-got-cracked attack, anything on that filesystem we can touch
> *is tampered with* until we can provably state that it has not been.
> Thats why I didn't bother dealing with the .listing files. They're bad
> data unless we can prove that they haven't been tampered with. However,
> we can trivially fix that by putting .listing files in the checksum file
> too.

We can more trivially fix that by listing the files in the directory
and comparing to the .listing file. Note that .listing files don't
contain any data which is not already present.

Or you can just find -name .listing | xargs -r rm, and run
archive-fixup. Unconditionally.

-- 
  .''`.  ** Debian GNU/Linux ** | Andrew Suffield
 : :' :  http://www.debian.org/ |
 `. `'                          |
   `-             -><-          |

signature.asc
Description: Digital signature