[OE-core] [PATCH] mirrors.bbclass: Add new KERNELORG_MIRROR = ftp.sunet.se
Richard Purdie
richard.purdie at linuxfoundation.org
Mon Jan 30 11:15:22 UTC 2012
On Sun, 2012-01-29 at 16:35 +0100, Koen Kooi wrote:
> Op 29 jan. 2012, om 15:26 heeft Ulf Samuelsson het volgende geschreven:
>
> > www.kernel.org is missing a lot of files.
> > Add the "ftp.sunet.se" mirror containing many missing files.
>
> Since the files on kernel.org were removed because they might be
> compromised, why do we add a mirror that has kept the compromised
> files?
Its a valid question.
In our favour, we have checksums on all the SRC_URIs these days and I
look suspiciously at anyone changing then other than at version upgrade
time. We therefore have more protection in place than most for this kind
of problem.
Cheers,
Richard
More information about the Openembedded-core
mailing list