another use of md5sums

1997-12-20 Thread Radu Duta
On Fri, Dec 19, 1997 at 01:28:52PM -0500, Mark W. Eichin wrote: > 1) a hardware flake out [computer at a residential site with >poor environment control, cheap IDE disks -- you know, what most >developers have, as well as many users] that *seems* to have recovered >cleanly. > 2) running

md5 on the fly or md5 in deb, RIPEMD-160 vs MD5

1997-12-20 Thread Radu Duta
On Sat, Dec 20, 1997 at 04:28:02PM +1100, Hamish Moffatt wrote: >Well, calculation at install time doesn't prevent somebody >modifying the .deb (which is easy), especially in the case >of non-official sites. Does dpkg check the MD5sum with >the one in the Packages file or in the archive itself? >Ev

MD5SUMs in debs / dpkg install hook (new thought)

1997-12-19 Thread Radu Duta
One person is against it; for reasons I have yet to understand, and I'm beginning to have second doubts about it as well (for other reasons). What I'm thinking is that maybe it should be the responsability of dpkg, since it is the package manager after all. The package itself works as is and ther

Re: are md5sums mandatory for all packages?

1997-12-18 Thread Radu Duta
On Thu, Dec 18, 1997 at 02:19:07AM -0600, Manoj Srivastava wrote: >Radu> Hmm, well my intention for the md5sums is a bit different. I'd >Radu> like to use them to 1)check package integrity, and 2)check for >Radu> modified configuration files. Tripwire is fine, and you'd still >Radu> have to run t

Re: are md5sums mandatory for all packages?

1997-12-17 Thread Radu Duta
On Tue, Dec 16, 1997 at 11:46:29PM -0600, Manoj Srivastava wrote: > > The adddition of the md5sums has come up before. Personally, I > think the utility is limited, given the presence of tripwire, which > goes much further to ensure the integrity of the system (For example: > a bad guy change