Well, that'll teach me to open my mouth.... :-)

I've gotten preliminary *.md5 file checksumming put into Oxygen's 
package handling system.  The files are included in the packages in 
the path of: /var/lib/lrpkg/<pkg>.md5 and are created during the 
package creation process automatically.

These package files are checked when "apkg -v <pkg>" is used, and 
also are checked during installation.  In both cases, the checksum 
for <pkg>.md5 is skipped; after all, what IS the checksum for a file 
being created while checksumming?  That's like trying to put a key 
signature on a key signature on a key signature...

The only package handled differently is root.lrp, since the root.list 
file doesn't really contain files to include but permits the system 
to catch files that are NOT included.  You really don't want to 
checksum the entire system - not yet anyway.  This also hints at the 
fact that the "exclude" files are NOT checked during md5sums; 
anything listed in <pkg>.list is checksummed, even if it is contained 
in a <pkg>.exclude ...  I'll have to think about that...

I guess the next thing is to create a mini-tripwire :-) using 
md5sums.  Hmmm....

find / | md5sum > sys.md5sum

...hmmm....

-- 
David Douthitt
UNIX Systems Administrator
HP-UX, Linux, Unixware
[EMAIL PROTECTED]

_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to