Currently to verify package integrity, the command
rpm --verify is run. In reading the
rpm manual (http://ftp.rpm.org/max-rpm/s1-rpm-verify-output.html), there is no indication as to the veracity of the verification process.
- What alternatives are there to assure the integrity of packages post installation as well as subsequent updates and upgrades?
- How can corruptions by omission or commission be detected and identified?
- What options are there if a known good state is unknown?