From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1FuCyU-0000Ph-Lu for garchives@archives.gentoo.org; Sat, 24 Jun 2006 18:35:19 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.7/8.13.6) with SMTP id k5OIWbaT005704; Sat, 24 Jun 2006 18:32:37 GMT Received: from zaz.kom.auc.dk (zaz.kom.auc.dk [130.225.51.10]) by robin.gentoo.org (8.13.7/8.13.6) with ESMTP id k5OIL9uZ000404 for ; Sat, 24 Jun 2006 18:21:09 GMT Received: from pc163-c.stud.ies.auc.dk ([10.8.12.163]) by zaz.kom.auc.dk with esmtp (Exim 2.05 #3) id 1FuCkm-0006VK-00 for gentoo-user@lists.gentoo.org; Sat, 24 Jun 2006 20:21:08 +0200 From: Bo =?utf-8?q?=C3=98rsted_Andresen?= To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] emerge mod_security: ERROR 404: Not Found. Date: Sat, 24 Jun 2006 20:22:00 +0200 User-Agent: KMail/1.9.3 References: <449C1907.3020104@gmx.net> <449D271E.8020007@vista-express.com> <449D6D7A.8000709@gmx.net> In-Reply-To: <449D6D7A.8000709@gmx.net> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart11296862.p6jg7VKerF"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200606242022.04469.bo.andresen@zlin.dk> X-Archives-Salt: ed0cf6e8-5357-43ff-ad91-ba5bb7bd5947 X-Archives-Hash: b48ce0c2b512434802aa0d2b1566765a --nextPart11296862.p6jg7VKerF Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Saturday 24 June 2006 18:51, Jarry wrote: > Anyway, I am still surprised a little. I thought sources > of portage-packages are mirrored on gentoo-mirrors... They are. If the package has just been added to the tree they may not have= =20 reached your mirror yet. If that is not the reason then it is probably a bu= g.=20 The official mirror should be in the ebuild to tell the mirrors where to=20 fetch it from and as a backup if it cannot be found on the Gentoo mirrors. > It seems to me to be a little "insecure", to download > mod_security from somewhere "from wild" instead of > gentoo-mirrors or homepage. One can not be sure those > sources have not been modified... As long as you don't override a digest verification error you are safe. Bew= are=20 of those who tell you to override a digest verification error by running: # ebuild $ebuild digest or: # emerge --digest $pkg =2D-=20 Bo Andresen --nextPart11296862.p6jg7VKerF Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQBEnYLM8/kKEzmwNNoRAubvAKDhaepfo2Teg9a6e5D0B9P5hq19FACgk1Pr 7mAiGw1tOZEMZbd58eiNraw= =Yssu -----END PGP SIGNATURE----- --nextPart11296862.p6jg7VKerF-- -- gentoo-user@gentoo.org mailing list