How to check if the $file is as original as installed by the rpm?

November 1st, 2006

I assume that you are running a version of FC

1) Import the GPG key from the fedora server

Assuming you are doing it on a FC6 base system
wget -c http://download.fedora.redhat.com/pub/fedora/linux/core/6/i386/os/RPM-GPG-KEY
rpm –import RPM-GPG-KEY

2) Once import is done, check your rpm with

rpm -V rpm_name

…thanks to paranoid Lap_64 to bring this up!
lolz!

Posted in Fedora Core, How-To | Comments (4)

4 Responses to “How to check if the $file is as original as installed by the rpm?”

  1. Stephen Smoogen Says:
    November 1st, 2006 at 9:41 am

    Actually the more paranoid would also do the following:

    Download the signed installation RPM from a known good site, and then do a

    rpm -K rpm_package #make sure its good.

    rpm -Vp rpm_package

  2. Robin Norwood Says:
    November 1st, 2006 at 9:55 am

    If you only want to check an individual file rather than an entire RPM, you can do rpm -qVf, like so: (picking a file at random)

    1. cd /usr/lib
    2. rpm -qVf libpng10.a

      (no response means ‘no changes’)

    3. touch libpng10.a
    4. rpm -qVf libpng10.a

      …….T /usr/lib/libpng10.a

      You can also find out what package provides an rpm with rpm -qf

  3. manuj Says:
    November 7th, 2006 at 8:21 pm

    sale kabhie blog hi chk kar liya kar

  4. makuchaku Says:
    December 26th, 2006 at 4:06 am

    Thanks Stephen, Robin :)

Leave a Reply

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image