Bug 2916 - Cannot verify installed package against package.rpm
Summary: Cannot verify installed package against package.rpm
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: rpm (Show other bugs)
(Show other bugs)
Version: 6.0
Hardware: All Linux
Target Milestone: ---
Assignee: Jay Turner
QA Contact:
Keywords: Security
Depends On:
TreeView+ depends on / blocked
Reported: 1999-05-18 20:13 UTC by Jan Carlson
Modified: 2015-01-07 23:37 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 1999-05-18 22:14:43 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description Jan Carlson 1999-05-18 20:13:47 UTC
rpm -Vp something.rpm says
"package something.rpm is not installed"
even for packages I just now installed.

Others have seen this same error.

This bug relates to security.  I cannot verify
whether 'ls' is cracked, or honest:

If I suspect my system was compromised,
rpm -V packagename can give false results
if the rpm database is also compromised, so
I really do want rpm -Vp to work, in cases
of suspected rootkit, etc.

Comment 1 Jeff Johnson 1999-05-18 22:14:59 UTC
This has been fixed in rpm-3.0.1. Grab a copy from Raw Hide,
checkout the CVS server, or wait for the pending errata.

Note You need to log in before you can comment on or make changes to this bug.