Quote:
Originally Posted by e1-531g
...Does OpenBSD saves hashes of these files somewhere? I mean individual *.o files...
|
Indirectly, only. They are installed via unpacking /usr/share/relink/kernel.tgz, which is included in the signed baseXX.tgz fileset. Binary updates through syspatch(8) maintain this integrity chain through signify(1). Any kernel patches applied by building from source code -- for example, applying a -stable patch which does not qualify for errata publication -- can't be signed by the Project so any integrity controls must be applied by local administration.