md5sum for entire filesystem?

[Kwan Lowe]

> Is there a md5sum for all the files in the FC1 distribution?  I know
> there's md5sums for the iso and rpm packages.  But, I'm looking for
> md5sum for each of the files.
>
> Is using md5sum even a good way to verify that system files haven't
> been compromised?  I've tested md5sums from a two FC1 installs, and
> they don't match.  And, I'm certain both of these boxes haven't been
> compromised.

You can use the built-in rpm verification tools to check timestamps,
signature, size, permissions, etc.. Outside of this, look at tripwire or other
IDS systems. What files are you concerned about? Be aware that many config
files, logs, etc.. will get overwritten in normal course.

-- 
* The Digital Hermit   http://www.digitalhermit.com
* Unix and Linux Solutions   kwan at digitalhermit.com