From: Jeff Ratliff <jefrat earthlink net
To: For users of Fedora Core releases <fedora-list redhat com
Subject: Re: rpm --verify -a
Date: Tue, 29 Jun 2004 16:45:07 -0400
----------------------------------------------------------------------------
----
On Mon, Jun 28, 2004 at 02:11:38PM -0400, Dwaine Castle wrote:
I ran rpm âverify âa and received 2141 lines in output. Below, Iâve
included a simple distribution of the error messages and some
examples.
Is
this normal? I installed FC2 from the DVD ISO image, and it passes
the
MD5
tests as well as the installation media check. Should I download the
installation again, or go after the individual rpms, or is this an
issue
at
all? As far as I can tell everything seems to working well.
I don't see anything you listed that was terribly alarming. You'll
notice a lot of the config files are different in size and MD5 sum,
but that's to be expected if they change after installation. When I
did the same command I got similar results, although my numbers
where smaller as that particular system doesn't have as many
packages installed. I also had quite a few devices that were
showing a different user, but I assume that's because they were
installed under a different user than the one who built the package.
Do a man rpm and search for --verify and look at the description of
the error strings. You're seeing a list of every file that has
changed since install, but there are plenty of files that SHOULD
change after install.
As always, YMMV. If someone r00t3d your b0X and you don't catch
it because you listened to me, I'm not responsible. =)
Thanks Jeff. I am just working my way through Michael Jang's RHCE book and
ran this as an example. The book didn't mention anything about so many
error messages. Of course, he is using RHEL3.0 and I am using Fedora2.
I only turn the machine on once or twice a week for a couple hours, so I don
’t think that anybody has had time to break in. Plus there is a
firewall/router between it and the internet. The only user is root and the
only changes have been those made by up2date except for a minor battle with
switchdesk.
Anyway, I am glad to hear that this is not a catastrophic failure that I
somehow missed.
Thanks again.
Dwaine