#166937 keep track of original permissions of package-owned files?

Package:
dpkg
Source:
dpkg
Description:
Debian package management system
Submitter:
Andrea Borgia
Date:
2026-05-13 02:31:02 UTC
Severity:
wishlist
#166937#5
Date:
2002-10-29 14:22:09 UTC
From:
To:
I have recently migrated my two PCs from RedHat to Debian and, although I do
like most of the features of apt, dpkg and friends, there is at least one
specific area which I feel it is lacking.

Using rpm, it was possibile to:
a) verify file integrity wrt original package
b) verify permission/ownership as above
c) fix permission/ownership if need be, without reinstalling the package

In Debian, according to a few developers and users I talked to, it is
possible to:
a) use md5sums (OK)
b) hope... (NOT OK)
c) cobble up together a script which reinstalls all installed packages and,
in the process, restores original permission/ownership of files (OVERKILL)

The rationale for this request is as follows: during the migration, I
encountered a number of problems that I fixed by altering file
permission/ownership. Now that I feel I understand a little better how
Debian works, I'd like to verify which of the changes I made (if any) still
persist and, in this case, reset them to the original distribution settings,
to minimize the chances of future conflicts and security holes.

I've been told that in the past such requests were usually turned down on
the ground that doing so would add a functionality that is already present
in tools such as Tripwire and I disagree: I'm not interested in what
Tripwire (or similar) tools have to offer, I know full well that adding this
feature to dpkg won't buy me security against modifications and deliberate
tampering of the system, I'm simply looking for a convenient way to reset
settings to the original value.

#166937#8
Date:
2003-07-30 03:15:20 UTC
From:
To:
retitle 166937 keep track of original permissions of package-owned files?
reassign 166937 dpkg
thanks

A tool, debsums, already exists to verify the checksums of installed files.
Permissions information is not currently saved; reassigning to dpkg which
would be the place for such a feature if it were ever implemented.

#166937#19
Date:
2009-06-10 16:49:22 UTC
From:
To:
kcp