Re: [gentoo-user] emerge mod_security: ERROR 404: Not Found.

[Teresa and Dale <teendale@vista-express.com>]

Bo Ørsted Andresen wrote:

>On Saturday 24 June 2006 18:51, Jarry wrote:
>  
>
>>Anyway, I am still surprised a little. I thought sources
>>of portage-packages are mirrored on gentoo-mirrors...
>>    
>>
>
>They are. If the package has just been added to the tree they may not have 
>reached your mirror yet. If that is not the reason then it is probably a bug. 
>The official mirror should be in the ebuild to tell the mirrors where to 
>fetch it from and as a backup if it cannot be found on the Gentoo mirrors.
>
>  
>
>>It seems to me to be a little "insecure", to download
>>mod_security from somewhere "from wild" instead of
>>gentoo-mirrors or homepage. One can not be sure those
>>sources have not been modified...
>>    
>>
>
>As long as you don't override a digest verification error you are safe. Beware 
>of those who tell you to override a digest verification error by running:
>
># ebuild $ebuild digest
>
>or:
>
># emerge --digest $pkg
>
>  
>

Very true.  I have seen people on this list tell people just that.

Dale
:-)  :-)
-- 
gentoo-user@gentoo.org mailing list