Package: checksecurity Version: 2.0.7-6 Severity: wishlist Could / should checksecurity add a plugin to check the files in the distribution against their checksums in /var/lib/dpkg/info/*.md5sums? This provides an easy way to improve the security of the system a little. Maybe combined with a diffing mechanism to avoid reporting the same discrepancies over and over.
Here is a simple script (in shell) to list files that have conflicting md5sums from those in the package: cat /var/lib/dpkg/info/*.md5sums | while read md5 file; do if test X`md5sum "/$file" | cut -d' ' -f1` == X$md5; then :; else echo $file; fi; done -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages checksecurity depends on: ii cron 3.0pl1-86 management of regular background p ii debconf 1.4.30.13 Debian configuration management sy ii perl 5.8.4-8sarge3 Larry Wall's Practical Extraction -- debconf information excluded -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
