# Math-Linux.com

Knowledge base dedicated to Linux and applied mathematics.

Home > Linux > RPM > RPM What files have been changed ? — Verify System Files

## RPM What files have been changed ? — Verify System Files

[user@localhost] rpm -Va --nomtime
S.5.....  c /etc/ssh/sshd_config
S.5.....  c /etc/updatedb.conf
• V for verify
• a for all packages
• nomtime do not care about modification time

The format of the output is a string of 8 characters, a possible attribute marker:

c %config configuration file.
d %doc documentation file.
g %ghost file (i.e. the file contents are not included in the package payload).

from the package header, followed by the file name. Each of the 8 characters denotes the result of a comparison of attribute(s) of the file to the value of those attribute(s) recorded in the database. A single "." (period) means the test passed, while a single "?" (question mark) indicates the test could not be performed (e.g. file permissions prevent reading). Otherwise, the (mnemonically emBoldened) character denotes failure of the corresponding —verify test:

S file Size differs
M Mode differs (includes permissions and file type)
5 MD5 sum differs
D Device major/minor number mismatch