olopez32 / ganeti

Automatically exported from code.google.com/p/ganeti
0 stars 0 forks source link

devel/build_chroot uses cabal without verifying downloaded sources #749

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
The devel/build_chroot script uses cabal to build
a chroot. Cabal, however downloads and install sources
without verifying the downloaded packages against
known good hashes, or similar integrity verification.

Hence, we should add such a verification by hand.

Original issue reported on code.google.com by aeh...@linta.de on 5 Mar 2014 at 9:24

GoogleCodeExporter commented 9 years ago

Original comment by aeh...@google.com on 6 Mar 2014 at 8:03