From: Michel <mi...@da...> - 2002-02-18 00:35:38
|
On Son, 2002-02-17 at 22:48, Andreas W=FCst wrote: >=20 > Am 17-Feb-02 schrieb Michel D=E4nzer: >=20 > >> PPS: What about security during a network installation? Is there any c= hance > >> to break into a system actually just installing, because there isn't a= ny > >> root pasword set so far? Or spoofing the download files? > >=20 > > The Release file is signed, so if you worry about that, you can verify > > the signature and then the package files with the MD5 sums in the > > Release file. >=20 > Hmm, but how to do that? The Release file GnuPG signature is in the Release.gpg file, or what do you want to know? > But... I couldn't install on my second try tonight: Doing the base > installation gave me a "malformed release file"! And I tried several time= s to > connect to the server. What should that tell me? Use a basedebs tarball. ;) Seriously though, that's an infamous bug. I don't think it really has to do with the Release file at all; at least when we installed a box at work, the error seemed to appear to quickly for it to even have a chance to download it. Is this with the 3.0.19 boot-floppies? --=20 Earthling Michel D=E4nzer (MrCooper)/ Debian GNU/Linux (powerpc) developer XFree86 and DRI project member / CS student, Free Software enthusiast |