Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5717

Re: debcheckroot v2.0 released

From Lewis Yarema <lewisyarema91@gmail.com>
Newsgroups linux.debian.security
Subject Re: debcheckroot v2.0 released
Date 2019-11-22 12:10 +0100
Message-ID <z5eZ3-yr-9@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Yes, that is a very good idea!:

* debcheckroot with sha256-lists is considerably faster because it does not
need to download and unpack all packages

* unknown/forgotten packages of elder versions could still be checked
because the sha256sums are not forgotten

* You can generate sha256sums incrementally with debcheckroot, i.e. extend
an existing list only for the new packages

Great! I remember there were semi-public sha256-sum file lists for Windows.
Why not have this for important Linux distributions as well? It should not
be too hard to do. Furthermore once you have such a sha256-list you are
independent from a specific tool. There is no serious checking against
malware if you do not have the sha256s!!

Back to linux.debian.security | Previous | Next | Find similar | Unroll thread


Thread

Re: debcheckroot v2.0 released Lewis Yarema <lewisyarema91@gmail.com> - 2019-11-22 12:10 +0100

csiph-web