The comments about debsums are useful and contribute to the whole issue butthey still miss one of my key points/queries.
There is no way to verify/correct the MODE, USER, GROUP, TYPE of any files installed in a pkg. If I am wrong please point out where, with an installed pkg (and preferably without having a copy of the .dpkg around) once can tell if a pkg is _installed_correctly_. This is a real issue in the enterprise world and I think debian is a better system than Redhat but unless the developer community becomes aware and proactive about meeting enterprise needs we're going to lose out to a competing system which _I_ believe is inferior, but which is getting a lot of commerical support. I don't greatly care about competition per-se, but I do care about improving debian to meet my needs and I'm sure those of others too. So is the developer community interested in working with me to add these (and other important features) for a larger commercial environments. Bear in mind I have real coded solutions to many of these issues which I hope to be able to share.... One of the solutions I have implemented is a file containing: type(eg Dir, Sym, File), path, mode, uid, gid, symlink destination and in my case md5sum and file size (deb would use the sep md5sum file) [correct size is useful for humans :-)] This permits my command pkginfo -v to verify that a pkg is installed correctly and can even fix certain errors (eg mode/uid/gid) if requested. regards kim > -----Original Message----- > From: Brian May [mailto:[EMAIL PROTECTED] > Sent: Sunday, October 05, 2003 9:39 AM > To: Fabien Ninoles > Cc: Kim Lester; debian-devel@lists.debian.org > Subject: Re: Package verification and "/usr/bin/install" tool > replacements > > > On Sat, Oct 04, 2003 at 01:42:36PM -0400, Fabien Ninoles wrote: > > Although your proposition seems more complete, have you try > > debsums and checksecurity? debsums with the following > > feature in /etc/apt/apt.conf > > > > DPkg::Post-Invoke { > > "debsums --generate=nocheck -sp /var/cache/apt/archives"; > > };