[Rpm-maint] Feature request: Improved speed for 'rpm -qa'
notting at redhat.com
Wed Dec 20 16:18:53 UTC 2006
James Olin Oden (james.oden at gmail.com) said:
> You can controll access with SE Linux all you want but there is no way
> for me to tell that someone installed a rogue package without checking
> digests at some point (maybe they were in a hurry) and that now I'm
> looking at infomation from that rogue packets header without checking
> digests on query.
You also don't know if they wrote over the binaries on the filesystem,
etc. I'm just of the opinion that the database is the wrong place
to be enforcing these checks, but, to each their own.
More information about the Rpm-maint