News for hackers. Stuff that matters.

A comment on Why the Linux kernel is hardly at risk.

Re:Why the Linux kernel is hardly at risk by beza1e1 on Thursday September 01, 2011 @07:11AM (#2949490)
The latest git SHA1 sum is not enough to check. The interesting part for intruders are "grafts":

"Graft points or grafts enable two otherwise different lines of development to be joined together. It works by letting users record fake ancestry information for commits." https://git.wiki.kernel.org/index.php/GraftPoint

Still easy to check though. ;)

[ Parent | on HN ]
Re:Why the Linux kernel is hardly at risk by lloeki on Thursday September 01, 2011 @07:25AM (#2949517)
IIRC grafts are local and not propagated by clone/push/fetch. Replacements via git-replace(1) are, though.
[ Parent | on HN ]