Bug 2916 - Cannot verify installed package against package.rpm
Summary: Cannot verify installed package against package.rpm
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: rpm
Version: 6.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Jay Turner
QA Contact:
URL:
Whiteboard:
Keywords: Security
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 1999-05-18 20:13 UTC by Jan Carlson
Modified: 2015-01-07 23:37 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 1999-05-18 22:14:43 UTC


Attachments (Terms of Use)

Description Jan Carlson 1999-05-18 20:13:47 UTC
rpm -Vp something.rpm says
"package something.rpm is not installed"
even for packages I just now installed.

Others have seen this same error.

This bug relates to security.  I cannot verify
whether 'ls' is cracked, or honest:

If I suspect my system was compromised,
rpm -V packagename can give false results
if the rpm database is also compromised, so
I really do want rpm -Vp to work, in cases
of suspected rootkit, etc.

Comment 1 Jeff Johnson 1999-05-18 22:14:59 UTC
This has been fixed in rpm-3.0.1. Grab a copy from Raw Hide,
checkout the CVS server, or wait for the pending errata.


Note You need to log in before you can comment on or make changes to this bug.