I think it would be nice to have an option for portage to generate an md5sum or simmilar for all of the binaries that it compiles. Uses for this would be to check (with a command, such as eg. 'emerge verify') if any of the program executables have been modified since they were created, thus letting you detect rootkits etc. Reproducible: Always Steps to Reproduce: 1. 2. 3.
Most rootkits add ld.so.hash and others to intercept md5sums... So that really won't help _too_ much. Check out 'qpkg gcc -v -c' though as it does do what you want. MD5s are kept for everything merged.
