Re kernel.org status: hints on how to check your machine for intrusion

Matthew W.S. Bell
2011-10-13T11:00:08Z

[-- Attachment #1: Type: text/plain, Size: 600 bytes --]

On Fri, 30 Sep 2011 16:59:24 -0700, Greg KH wrote:
> 2. Verify that your package signatures match what your package manager thinks
> they are.

<snip>

> To do this on a Debian based system, run the following bash snippet:
> dpkg -l \*|while read s n rest; do if [ "$s" == "ii" ]; then echo $n;
> fi; done > ~/tmp.txt
> for f in `cat ~/tmp.txt`; do debsums -s -a $f; done

At least since squeeze, debsums defaults to checking all packages, so
the following is sufficient:
debsums -as

It may also be worth checking the output of:
debsums --list-missing

Matthew W.S. Bell

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]