l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
January 6: Social gathering
Next Installfest:
TBD
Latest News:
Nov. 18: Club officer elections
Page last updated:
2002 Oct 07 22:14

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] possible rooted system / checking md5sum on debian
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] possible rooted system / checking md5sum on debian



On Sun, Oct 06, 2002 at 10:14:41AM -0700, Peter Jay Salzman wrote:
> is there any automated way to check md5sums of all packages that provide
> binaries for debian packages?

yes.
  debsums.

#Description: Verify installed package files against MD5 checksums.
# debsums can verify the integrity of installed package files against
# MD5 checksums installed by the package, or generated from a .deb
# archive.

  But keep in mind this is a check of the installed files against the
md5 checksums which shipped in the .debs you installed.  So if someone
broke a mirror site and replaced the .debs there and changed the 
.sums file in the bogus .debs this check will be useless.


  If you are after checking the package gnupg signatures and tracing
down to the binaries that you have installed to verify that you have
the correct things... well that isn't implemented yet.  Hopefully
next Debian release... see the following url for more details.

http://www.linuxsecurity.com/docs/harden-doc/html/securing-debian-howto/ch7.en.html
_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
O'Reilly and Associates
For numerous book donations.