Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5717 > unrolled thread
| Started by | Lewis Yarema <lewisyarema91@gmail.com> |
|---|---|
| First post | 2019-11-22 12:10 +0100 |
| Last post | 2019-11-22 12:10 +0100 |
| Articles | 1 — 1 participant |
Back to article view | Back to linux.debian.security
Re: debcheckroot v2.0 released Lewis Yarema <lewisyarema91@gmail.com> - 2019-11-22 12:10 +0100
| From | Lewis Yarema <lewisyarema91@gmail.com> |
|---|---|
| Date | 2019-11-22 12:10 +0100 |
| Subject | Re: debcheckroot v2.0 released |
| Message-ID | <z5eZ3-yr-9@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Yes, that is a very good idea!: * debcheckroot with sha256-lists is considerably faster because it does not need to download and unpack all packages * unknown/forgotten packages of elder versions could still be checked because the sha256sums are not forgotten * You can generate sha256sums incrementally with debcheckroot, i.e. extend an existing list only for the new packages Great! I remember there were semi-public sha256-sum file lists for Windows. Why not have this for important Linux distributions as well? It should not be too hard to do. Furthermore once you have such a sha256-list you are independent from a specific tool. There is no serious checking against malware if you do not have the sha256s!!
Back to top | Article view | linux.debian.security
csiph-web