Re: kernel.org status: hints on how to check your machine for intrusion

H. Peter Anvin
2011-10-01T22:33:39Z

On 10/01/2011 10:54 AM, Andreas Schwab wrote:
> Andy <akwatts@ymail.com> writes:
>
>> I must be doing something wrong. I only have the 2.6 git repo (so my tags
>> don't drill down to 2.6.x.y just 2.6.x) but my experiement isn't giving
>> the results I expected.
>>
>> [Cloned repo]
>> $ git archive --format=tar --prefix linux-2.6.39/ v2.6.39 | md5sum
>> 482f8bd941def0548a95f34e2d290dfd -
>
> Try setting tar.umask to 022 (default is 002).
>

One thing to be aware of is that tarballs produced with git before
version 1.5.0-rc1 (mid-January 2007) have owner/umask git/git 000 as
opposed to root/root 002 or 022.

-hpa