[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: System integrity...

On Sat, 12 Jun 1999, Chris Leishman wrote:

> A program such as cruft could be produced that also verified binary signatures
> against those in the original packages - thus highlighting non-debian
> binaries without the need of a tripwire database.

I once wrote a little perl script that does it the other way round:
Compare all files listed in /var/lib/dpkg/info/*.md5sums with their 
versions currently stored in the real filesystem.
But it takes some time to run: something between 5 and 10 minutes to check
about 500 MB on my AMD K6-266 with a DCAS SCSI disk.

If you're interested in it, just tell me.

PGP public key available (KeyID 2EA7BBBD) | Echelon is watching you.
http://www.in.tum.de/~schoepf/pgpkey.txt  |

Reply to: