Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5717
| From | Lewis Yarema <lewisyarema91@gmail.com> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: debcheckroot v2.0 released |
| Date | 2019-11-22 12:10 +0100 |
| Message-ID | <z5eZ3-yr-9@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
Yes, that is a very good idea!: * debcheckroot with sha256-lists is considerably faster because it does not need to download and unpack all packages * unknown/forgotten packages of elder versions could still be checked because the sha256sums are not forgotten * You can generate sha256sums incrementally with debcheckroot, i.e. extend an existing list only for the new packages Great! I remember there were semi-public sha256-sum file lists for Windows. Why not have this for important Linux distributions as well? It should not be too hard to do. Furthermore once you have such a sha256-list you are independent from a specific tool. There is no serious checking against malware if you do not have the sha256s!!
Back to linux.debian.security | Previous | Next | Find similar | Unroll thread
Re: debcheckroot v2.0 released Lewis Yarema <lewisyarema91@gmail.com> - 2019-11-22 12:10 +0100
csiph-web