-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 David Fletcher wrote: > At 09:33 24/08/2006, you wrote: > >>I was having same problems with Fedora Core 5 ( FC 5 ) with SELinux >>disabled and found this link helpful: >>http://rpmfarm.free.fr/5/i386/RPMS.farm/repodata/repoview/kmod-truecrypt-2.6.17-1.2174_FC5smp-0-4.2a-1.EL.FC5.html >> >>It seems that the kernel needs a patch for the truecrypt module. Not a patch really, just a missing header file. > Being an intrinsically suspicious and untrusting of strangers type, > which is probably true of anybody interested in using truecrypt, how > do we know that the above is kosher? I mean, for all I know it could > be sponsored by the FBI and contain a special patch. Or am I being > paranoid? No, you're not being paranoid, your enemies might be real. :) But that's what source code and gpg signatures are for. You don't have to take it on faith that there aren't any evil patches. You can grab the SRPM[1] from that site and verify that the source code included is what came from Truecrypt's website. The detached signature for the source code tarball is available on truecrypt.org[2]. You'll also want to check out the dm.h header that's in the SRPM to ensure that it matches what comes from the fedora kernel source. Then you can build your own rpm. :) > If enough people are interested, would the Fedora team be prepared > to add truecrypt to Extras? If you're being paranoid, how do you really know that what comes from Fedora Extras would be kosher? [1] http://rpmfarm.free.fr/5/i386/SRPMS.farm/repodata/repoview/truecrypt-0-4.2-1.EL.FC5.html [2] http://www.truecrypt.org/downloads/truecrypt-4.2-source-code.tar.gz.sig - -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ====================================================================== Politicians are interested in people. Not that this is always a virtue. Fleas are interested in dogs. -- P.J. O'Rourke -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQFDBAEBAgAtBQJE7vejJhhodHRwOi8vd3d3LnBvYm94LmNvbS9+dG16L3BncC90 bXouYXNjAAoJEEMlk4u+rwzjflcH/2pkSqncdtJdgMoYHpBfJitKzWRBHe008wMG +hL0/R1CIRO/QPJgJizjXyK9re64fq5Aw9MCyIG+ZqbpNvGekV4RcPDvPEtQTX+v uu/cgvo74RVW5n/grTmC6d60VazJ1EqnkUy11dbOP8IPZnx5BN4Cp0jmp9vTEFPx 7exrvUzctIWHxoArAQUyxSQ5ocJ8sWbHDY8eqF95QFO92xiZXcUDEIUIaUPuDduA /O47s6oDQr615ijEKd8N62l+uS6RyXQHN0iU4ihED7ZFaRCYuEmvSL9zcjNpTnDf HjvQtyz+bwFglTR9sqrHPQLsm7UaZMxPo8eFa+F1HEi5y+rUf74= =loKv -----END PGP SIGNATURE-----
