Re: per-file checksums in dpkg
On Tue, 18 Feb 1997, Chris Fearnley wrote:
> 'Richard G. Roberto wrote:'
> >
> >It just seems that dpkg is pretty stable and messing with it
> >means messing with "the franchise". I was just wondering what
> >anyone thought about adding this functionality without
> >encumbering dpkg. Feasable? not feasable? Deisreable? not
> >desireable?
>
> I agree. I think the security issues that are most important are best
> solved with PGP and md5sums on the files listed in the .dsc. All other
> security and data recovery plans that I've seen, are site specific and
> should use site specific tools. It's a philosophical choice (of
> course): to impose the reasonable policy of chksums on all Debian
> users. But I think dpkg shouldn't get involved in the domain of
> tripwire and cfengine and friends.
>
> Unix is built on the synergy of small tools each doing its job well.
> Not one tool (dpkg) doing everyone's job for them. IMHO!
I agree with you, mostly because this tool is :
md5sum 'dpkg -L <package-name>' > /var/lib/dpkg/info/<package-name>.md5sums
Comments?
fab
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com
Reply to: