Incidentally, because of it's role in assembling a
distribution and, potentially, verifying signatures on software components,
etc., I'd think that "security assurance" is naturally something that a
distributor like SuSE might undertake as a way of distinguishing its
product. Thus, the work of verifying the authenticity of source
components, re-compiling them, etc., is done once for all.
Comments?
Peter Hollings