Re: Debian Verification?
On Wed, May 08, 2002 at 12:10:45PM -0400, Joey Hess wrote:
> Colin Watson wrote:
> > Of course, this doesn't help you if a cracker alters
> > /var/lib/dpkg/info/*.md5sums - but it sounds like 'rpm --verify' has the
> > same proviso. The debsums(1) man page talks about this under CAVEATS.
>
> Another neat trick you can pull if you have the CD you installed from or
> a local mirror or something is to yank the tarball out of each deb and
> use tar to verify it against what's on your disk. There is a simple
> command line that Jim Dennis came up with to do this, but I've lost it.
Nifty. This seems to work:
dpkg --fsys-tarfile foo.deb | tar -C / -d
--
Colin Watson [cjwatson@flatline.org.uk]
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: