it's worth noting that Jim Dennis <jimd@starshine.org> is working on a standalone auditing tool for debian. The basic idea is that it compares an actual .deb file with what's installed on the system and flags differences. It'll require that copies be kept of all installed deb's though, so it may only be practical for people who install from CD and do little upgrading. -- see shy jo