In article <58**********************************@27g2000hsf.g ooglegroups.com>,
<fl*****@yahoo.comwrote:
>I was wondering. Is there any free tool for automating
source builds that downloads the source code for
missing libraries and such? Sort of an apt-get for
sources? To the question of why, suppose one is in
an environment where one shouldn't trust outside
binaries, because they may contain code that's not
in the official source code.
And you are going to read through all of the source to ensure that
all of it is the "official source code", and that all of it is
trustable? And are you able to validate the tool to ensure that it
only gives you *official* source, that all of its source lists
point to the right place? And are you going to validate that all of
the mirrors are uncorrupted? (Yes, mirrors do get corrupted sometimes,
due to security faults.)
--
"The quirks and arbitrariness we observe force us to the
conclusion that ours is not the only universe." -- Walter Kistler