How to check if the $file is as original as installed by the rpm?

Posted on November 1, 2006, 8:29 am, by Mayank Jain (makuchaku).

I assume that you are running a version of FC

1) Import the GPG key from the fedora server

Assuming you are doing it on a FC6 base system
wget -c http://download.fedora.redhat.com/pub/fedora/linux/core/6/i386/os/RPM-GPG-KEY
rpm –import RPM-GPG-KEY

2) Once import is done, check your rpm with

rpm -V rpm_name

…thanks to paranoid Lap_64 to bring this up!
lolz!

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.


Posted under: Fedora Core, How-To Comment (RSS)  |  Trackback
  • Stephen Smoogen

    Actually the more paranoid would also do the following:

    Download the signed installation RPM from a known good site, and then do a

    rpm -K rpm_package #make sure its good.

    rpm -Vp rpm_package

  • Robin Norwood

    If you only want to check an individual file rather than an entire RPM, you can do rpm -qVf, like so: (picking a file at random)

    1. cd /usr/lib
    2. rpm -qVf libpng10.a

      (no response means ‘no changes’)

    3. touch libpng10.a
    4. rpm -qVf libpng10.a

      …….T /usr/lib/libpng10.a

      You can also find out what package provides an rpm with rpm -qf

  • http://manujmohla.blogspot.com manuj

    sale kabhie blog hi chk kar liya kar

  • http://www.makuchaku.in makuchaku

    Thanks Stephen, Robin :)

«
»