# how to see what files were changed – is system okay – is system not curropt
##################################################

This will scan all pacakges and check for curroption based on checksums. A good system will have almost nothing curropt, or maybe 1 file. Config files are allowed to be different as we change them, but excluding  config files, the system files shouldnt be curropt (if its a none important file, or one that changes often then its okay if its changed

Download step
===============

First login as root for best results (so can read all files)

# apt-get install debsums

SCAN ALL
==========

# debsums -a > ~/debsums-a-results.txt &

I put it in background with that last & character because its a long process, you could be doing other things in the mean time, bash shell will notify you when its done (you can monitor if its still runing by type “jobs” or “jobs -l” or looking at proccesses with “ps aux” or “top -c”)

everything that is OK and in good condition ends in OK so lets find what doesnt end in OK

# cat ~/debsums-a-new | grep -v OK$

To see whats okay:

# cat ~/debsums-a-new | grep -v OK$

Or in short:

For me what wasnt okay is this:

 

These are just configuration files, so we are okay
If there was important system files that were changed then we would be in a worse situation

SCAN EVERYTHING NOT INCLUDING CONFIG FILES (exclude config files)
==================================================

To scan everything besides the config files, just run debsums without any arguments

To scan all excluding configuration files:
# debsums > ~/debsums-a-results.txt &

Again I put it in the background as it will take a minute

everything that is OK and in good condition ends in OK so lets find what doesnt end in OK

# cat ~/debsums-a-new | grep -v OK$

To see whats okay:

# cat ~/debsums-a-new | grep -v OK$

Or in short:

For me what wasnt okay is this:

Notice by excluding the scan of config files the results of what is not okay is much smaller. It just so happens this file is okay to not be okay (I think…, i mean everything is running great and my system is not crying about gpg keys)

So only that one file, which happens to be updated during updates with apt-get so its not big deal. It would be a big if it was a system file of major importance.

Leave a Reply

Your email address will not be published. Required fields are marked *