Re: How secure is the openSUSE Build Service?

"Eduardo Tongson" <[email protected]> Wed, 7 Nov 2007 09:18:02 +0800
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
Aniruddha was asking which is safer. There is a difference between 3rd
party repositories and official repositories. If you do not trust the
distribution's official repositories your alternative would be Linux
from Scratch and individually checking source tarballs.

On 11/6/07, Thomas <[email protected]> wrote:
> Only if you assume *every* upstream developer is honest and/or trust the
> integrity of the Debian/Gentoo/FreeBSD servers... Hello rsync! ;-)
>
> Am Freitag 02 November 2007 schrieb Eduardo Tongson:
> > Correct.
> >
> > > Does this mean that a distro that doesn't require 3rd party repositories
> > > (Debian/Gentoo/FreeBSD) is safer?
> >
>
>
>