>You have to provide the exact source code you use to build the Busybox software you
distribute so people can rebuild them and verify that your binaries do come from this set of
sources.
And that is where the problems begin, for example with code that puts the compilation date
into the binary. That way you will never get the exact MD5 of the originally-shipped binary!
:-(
Posted Mar 9, 2008 7:59 UTC (Sun) by atai (subscriber, #10977)
[Link]
This should not be a problem... people can verify if your binaries are built this way from the
sources, by modifying the sources to hard code the dates you have in your binaries...