[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Packages removed from frozen



|         Then you use this gcc to cross compile gcc for Linux.

And do not forget to cross-compile your Linux kernel, otherwise you're taking
the risk of using a maliciously-infected Linux kernel, which can infect gcc
the next time you bootstreap gcc thinking that you have a safe path. Same
thing when you compile a kernel with a GCC that has been potentially
infected.

To make it short, you must never install a compiler, linker, kernel, shell
(used to spawn processes during the compilation) or whatever tool coming
from an unsafe path (in particular coming from a Debian developer's machine
which is not yours, as you may not know if its path was totally clean).


Reply to: