Re: Debian Verification?
On Wed, May 08, 2002 at 10:58:41AM -0400, Arthur H. Johnson II wrote:
> Is this possible in dpkg? Can I "verify" debs? I looked through the man
> pages and havent seen anything interesting.
debsums, although not all packages provide MD5sums files so you'll have
to use 'debsums -g' to generate the missing ones. Plans for signed .debs
have been made and will be implemented at some point.
Of course, this doesn't help you if a cracker alters
/var/lib/dpkg/info/*.md5sums - but it sounds like 'rpm --verify' has the
same proviso. The debsums(1) man page talks about this under CAVEATS.
--
Colin Watson [cjwatson@flatline.org.uk]
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: