> Is there a md5sum for all the files in the FC1 distribution? I know > there's md5sums for the iso and rpm packages. But, I'm looking for > md5sum for each of the files. > > Is using md5sum even a good way to verify that system files haven't > been compromised? I've tested md5sums from a two FC1 installs, and > they don't match. And, I'm certain both of these boxes haven't been > compromised. You can use the built-in rpm verification tools to check timestamps, signature, size, permissions, etc.. Outside of this, look at tripwire or other IDS systems. What files are you concerned about? Be aware that many config files, logs, etc.. will get overwritten in normal course. -- * The Digital Hermit http://www.digitalhermit.com * Unix and Linux Solutions kwan@xxxxxxxxxxxxxxxxx -- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list