Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

On a RedHat/CentOS system, I can verify the installed RPMs on my system using rpm -V.

What is the Ubuntu or apt equivalent of this command?

share|improve this question

2 Answers 2

up vote 23 down vote accepted

The package "debsums" is what you want to install to perform hash checks against installed packages.

For example, to check for changed files:

sudo debsums -c

Note that not all packages ship with md5sum file lists. You can see a list of those on your system with:

sudo debsums -l
share|improve this answer
    
"debsums -l" is the same as "debsums --list-missing" so it will list all packages without checksums. –  driax Dec 31 '13 at 21:49

To followup to what Kees said, to deal with packages that don't include a buildtime generated debsums md5sum file, by default the debsums package also installs an apt hook to generate a debsums as part of the package installation process. Thus, one way to generate the debsums file for those packages that are missing them is to apt-get install --reinstall them.

share|improve this answer
    
Thanks for the tip! I always assumed that the system would keep it's own list of signatures. I notice that Ubuntu binutils (which includes ld and some core tools) doesn't include a signature, which seems unwise considering that these linker tools are at the core of the system, and we need to ensure that these tools are never modified or comprimised. –  Stefan Lasiewski Oct 25 '10 at 20:16
4  
I found a simpler way to generate debsums for those packages that are missing them. The command sudo debsums_init will do the heavy lifting for you. It will download the packages from the repository, and will generate the md5sums for you. –  Stefan Lasiewski Oct 25 '10 at 22:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.