Bug 2916 - Cannot verify installed package against package.rpm
Cannot verify installed package against package.rpm
Product: Red Hat Linux
Classification: Retired
Component: rpm (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Jay Turner
: Security
Depends On:
  Show dependency treegraph
Reported: 1999-05-18 16:13 EDT by Jan Carlson
Modified: 2015-01-07 18:37 EST (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 1999-05-18 18:14:43 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Jan Carlson 1999-05-18 16:13:47 EDT
rpm -Vp something.rpm says
"package something.rpm is not installed"
even for packages I just now installed.

Others have seen this same error.

This bug relates to security.  I cannot verify
whether 'ls' is cracked, or honest:

If I suspect my system was compromised,
rpm -V packagename can give false results
if the rpm database is also compromised, so
I really do want rpm -Vp to work, in cases
of suspected rootkit, etc.
Comment 1 Jeff Johnson 1999-05-18 18:14:59 EDT
This has been fixed in rpm-3.0.1. Grab a copy from Raw Hide,
checkout the CVS server, or wait for the pending errata.

Note You need to log in before you can comment on or make changes to this bug.