kernel.org compromised
kernel.org compromised
Posted Sep 2, 2011 17:54 UTC (Fri) by slashdot (guest, #22014)In reply to: kernel.org compromised by zooko
Parent article: kernel.org compromised
Just check that the commit that you compiled from the git repository you downloaded is an ancestor of the current kernel commit.
Of course if you already ran the kernel on the machine storing the downloaded tree, a backdoored kernel could have in principle been programmed to clean up the git repository on disk, but I'd consider that extraordinarily unlikely.
Also, someone else would have likely noticed and reported the discrepancy to LKML.
At any rate, there is always some remote security risk, since for all we know Linus Torvalds himself could have inserted covert backdoors in the kernel source code.