[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: md5 checksums

On Mon, Apr 21, 2003 at 07:16:01PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote:

> That's what Tiger calls 'signatures'. It's pretty easy to do at the moment, 
> but I have not updated signatures for Debian for quite some time. If you 
> intend to keep a database you also have to consider that for every patch 
> (i.e. security update in a DSA) you need to regenerate it..

  I was thinking of several forms of this, to do it properly on a WORM
 and a nightly cronjob that could highlight differences and changes
 throught the preceding day.

> Well, we discussed about this but no-one stepped over to implement it. I 
> believe the cron package maintainer would be very grateful if someone 
> implemented a 'checksecurity' package which fixed all its current bugs 
> (#102186, #171980, #177120, #31902, #46779, #54376, #59809, #138484, 
> #154390, #163813, #176090) taking over its maintenance.

  I agreed to take over this checksecurity package, when the maintain
 finds the time to split it out from cron.  There was some discussion
 about it recently upon debian-devel.

  I'll mail Steve Greenland about it tonight to see how it's going, or
 if I can help.


Reply to: