Verifying

Verifying a package compares information about files installed from a package with the same information from the original package. Among other things, verifying compares the size, MD5 sum, permissions, type, owner, and group of each file.

The command rpm -V verifies a package. You can use any of the Verify Options listed for querying to specify the packages you wish to verify. A simple use of verifying is rpm -V foo, which verifies that all the files in the foo package are as they were when they were originally installed. For example:

• To verify a package containing a particular file:

rpm -Vf /usr/bin/foo

In this example, /usr/bin/foo is the absolute path to the file used to query a package.

• To verify ALL installed packages throughout the system:

  rpm -Va

• To verify an installed package against an RPM package file:

  rpm -Vp foo-1.0-1.i386.rpm

  This command can be useful if you suspect that your RPM databases are corrupt.

If everything verified properly, there is no output. If there are any discrepancies, they are displayed. The format of the output is a string of eight characters (a c denotes a configuration file) and then the file name. Each of the eight characters denotes the result of a comparison of one attribute of the file to the value of that attribute recorded in the RPM database. A single period (.) means the test passed. The following characters denote specific discrepancies:

• 5 - MD5 checksum

• S - file size
• L - symbolic link
• T - file modification time
• D - device
• U - user
• G - group
• M - mode (includes permissions and file type)
• ? - unreadable file

If you see any output, use your best judgment to determine if you should remove the package, reinstall it, or fix the problem in another way.