Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Kind of weak

Posted Jul 15, 2008 15:35 UTC (Tue) by salimma (subscriber, #34460)
In reply to: Kind of weak by JoeBuck
Parent article: Study: Attacks on package managers

There is a 'yum-fastestmirror' plugin, so if you know the target computer is using it, you can
set up a mirror a small number of hops away and have a good chance of being preselected.
Signing and dating the package list is still the safest solution.

(Log in to post comments)