rpm database integrity

pinguin74 <[email protected]>
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
Hello,

at sans.org I read:

"The first thing to do is check the contents of /var/lib/rpm. The
databases should have a date/time stamp of when you originally installed
the system. If you see a different date, be suspect of the integrity of
the databases."

Well, on my system the time stamp of the files within /var/lib/rpm do
not carry the time stamp from original installation, the time stamp seem
to be the last time I installed some new stuff with YaST.

But, the time stamp of the directory /var/lib/rpm itself actually is the
original time from installation.

I now wonder, does sans.org tell us something not entirely correct?

When you install stuff, doesn´t the time stamps change below /var/lib/rpm ?

Thanks
signature.asc (application/pgp-signature, 455 B)
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAwAGBQJUGKZMAAoJEEbP47fJHDB6BBkH+wVPqodA0OQDzrwB71C3E0Hb
cbbyk6eAVcAFrucR0O8aDKDe/NBwyEZ4tYhRM6DpHkTGHkmIwQZ2dC90SpAEAQbQ
XuIe4+HG18aZNDSqe8AlLPyecHKQmnIfLqxfZ43VbmfmSkjhWwYQqAuEVITIgs2r
YLI//IOMq04eWV7zZr94rXtN+du3atXCsbWDaEKtw5Aiox6AKvP2uEcKpA1mp0EJ
dsw6XTBnMjPKS2cYRFhkH4MyR8wRdtODHsG64HeEPtyRdCZGtBhrw1EztFzbSFfJ
dLh8Zmdf/eYXI+40H+bxmFC1PBIYxSAAsYIoDAcYFftS3W2/RH77t3YYO3akAgo=
=R2Gy
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.