Re: verify installed packages' binaries integrity ?

2008-12-19 Thread jul
Stuart Henderson wrote on 18/12/08 21:14: On 2008-12-18, jul jul_...@yahoo.fr wrote: a small question, is there any way to check integrity of installed packages'binaries ? yes, by (ab)using pkg_create: for i in `find /var/db/pkg -name +CONTENTS`; do pkg_create -nf $i /dev/null done

Re: verify installed packages' binaries integrity ?

2008-12-19 Thread Todd T. Fries
Try: pkg_delete -n /var/db/pkg/* Look for any lines mentioning failes are missing or files have the wrong hash. For example, I added a '.' to README.OpenBSD in qemu: $ pkg_delete -n qemu /usr/sbin/pkg_delete should be run as root Pretending to delete qemu-0.9.1p4 Problem:

verify installed packages' binaries integrity ?

2008-12-18 Thread jul
(Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have corrupted mtree files, can i ask pkg manager to say if any referenced

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread Guillermo Bernaldo de Quiros Maraver
Hi all. i think, that, you can use chkrootkit for this, you can see more about this software in their home page or in google. if you want to know more about this software, see the home page: http://www.chkrootkit.org/ bye. 2008/12/18, jul jul_...@yahoo.fr: (Note: it is not related to packages

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread Guillermo Bernaldo de Quiros Maraver
Hi again. Well, reading the file $PORTSDIR/infrastructure/mk/bsd.port.mk, i can see that you can get if a binarie is compromised by: cksum -b -a sha256 /usr/local/bin/program and see if this is equal to the +CONTETS file, if not, then, the binary maybe compromised ( i think, but not sure ).

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread jul
Guillermo Bernaldo de Quiros Maraver wrote on 18/12/08 20:30: i think, that, you can use chkrootkit for this, you can see more about this software in their home page or in google. thanks, but that's not what i am looking for. chkrootkit checks only a known list of binaries (mostly base i think)

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread Stuart Henderson
On 2008-12-18, jul jul_...@yahoo.fr wrote: a small question, is there any way to check integrity of installed packages'binaries ? yes, by (ab)using pkg_create: for i in `find /var/db/pkg -name +CONTENTS`; do pkg_create -nf $i /dev/null done

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread Paul de Weerd
On Thu, Dec 18, 2008 at 08:48:12PM +0100, Guillermo Bernaldo de Quiros Maraver wrote: | Hi again. | | Well, reading the file $PORTSDIR/infrastructure/mk/bsd.port.mk, i can | see that you can get if a binarie is compromised by: | | cksum -b -a sha256 /usr/local/bin/program and see if this is

Re: verify installed packages' binaries integrity ?

2008-12-18 Thread Denny White
On Thu, Dec 18, 2008 at 08:04:05PM +0100, jul spoke thusly: (Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have