From 7e14c8e8954b8c1eb1626d87b8f2a37bbd3a64b0 Mon Sep 17 00:00:00 2001 From: Francis Rowe Date: Sat, 11 Apr 2015 12:01:49 +0100 Subject: docs/tasks.html: Notes about sha512sum checking on downloads --- docs/tasks.html | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/tasks.html b/docs/tasks.html index 8b4767ec..be915c01 100644 --- a/docs/tasks.html +++ b/docs/tasks.html @@ -286,6 +286,15 @@ (but still include a commented-out link to the gerrit patch that the diff file came from) +
  • + HIGH PRIORITY! + When downloading coreboot/grub/memtest/etc using the download scripts, it currently does + not check the integrity of these sources at all. Libreboot releases are signed, but + what can be done to improve it is to check the sha512sums of all files downloaded + by these scripts (which are in the git repository, but not the release archives, + because the release archives already include these sources). Do this for all + non-integrated modules used in libreboot. +
  • HIGH PRIORITY! Make memtest86+ build using coreboot's own crossgcc toolchain. Currently, memtest86+ doesn't even work at all when cross-compiled using the toolchain in x86-64 trisquel7
  • -- cgit v1.2.3-70-g09d2