Just a question : could it be a good idea to move md5 on another server or to do 'emerge sync' asking for files on server A and digest files on server B where server B is any server in gentoo rsync rollover but not server A... Then, person have to compromise server A and server B to get his hack working... Hope this help Cheers -- Alex