FC12: Hidden files in /usr/bin/*

Matt Domsch Matt_Domsch at dell.com
Fri Jan 22 22:30:12 UTC 2010


On Fri, Jan 22, 2010 at 03:06:24PM -0500, Peter Jones wrote:
> Well, the standard IIRC does want them to be separate, though again it's
> important to realize that this check isn't meant to protect against an
> attack, but rather to check against erroneous corruption of the binary. It
> seems unlikely that such corruption would change the checksum to match the
> errors ;)
> 
> > The separate /lib directory tree seems the way to go, to me.  That way
> > the checksum files could be named the same as what they check, no magic
> > needed.

teach fipscheck to ask rpmlib ?  rpm -V.  We already have this method.

-- 
Matt Domsch
Technology Strategist, Dell Office of the CTO
linux.dell.com & www.dell.com/linux


More information about the devel mailing list