seth vidal skvidal at phy.duke.edu
Mon Aug 11 20:49:23 UTC 2003

On Mon, 2003-08-11 at 16:42, Florin Andrei wrote:
> "Hewlett-Packard, IBM, RSA Security, InstallShield Software, and Sun
> Microsystems are also involved in the File Signature Database (FSDB)
> effort. The repository will store metadata about individual files
> created by each of the vendors, such as the file's name, a ‘born-on’
> date and its digital hash values."
> http://www.techworld.com/news/index.cfm?fuseaction=displaynews&NewsID=349
> Any plans to do that with Red Hat as well?

a neat mechanism to doing this would be:

store the rpm package header from every package released by red hat on
every ver, etc etc.

then you'd be able to go through the header and compare it to what your
ondisk system says to see which files have changed from the original.

it'd be possible to write this in python using the rpmbindings to dump
the file info out of a file from your system, compare it to a remote
header and report back.

it'd be a neat trick too.


More information about the devel mailing list