Re: md5sums

[Jason Gunthorpe <jgg@ualberta.ca>]

On Tue, 1 Dec 1998, Christoph Lameter wrote:

> debsums is used for md5sums generated *before* generating the .deb. They
> will detect any tampering attempts or any other accidents in the whole
> packaging in and out process. Its an attempt to guarantee that the files
> are the way they were on the *maintainers* system.
> 
> tripwire adds md6sums *after* installing a .deb and a virus infected
> system could already have modified files.

Including the md5sum files :> It is no safer to generate and include the
hashes then it is to have the hashes generated on the fly. Both are
equally susceptible to all sorts of attacks

Jason