Tuesday, March 25, 2008

How to verify .rpm files vs. installation : addition

Really simple. rpm -V should be run as root for the most accurate reports.
Specifically, users cannot verify the checksums of files they cannot read.
So if you do 'rpm -Va' as a normal user it'll look like many SUID root binaries have
been changed. They probably haven't, you just don't have read perms; rpm can't
calculate the checksum and warns you because it can't vouch for the checksum.

No comments:

Post a Comment