Do package managers such as Synaptic and Apper check the hashes of installed as well as updated/downloaded packages by comparing them to online databases?
Do they maybe even identify packages by their hashes?
Asked
Active
Viewed 76 times
3
-
3I think what you're looking for is already answered on superuser: https://superuser.com/questions/990143/how-does-apt-get-checks-for-the-integrity-of-the-files-downloaded – Michael Hirschler Jul 26 '17 at 18:27
-
3[How is the authenticity of Debian packages guaranteed?](https://unix.stackexchange.com/q/285635/86440) might also be relevant (I’m not suggesting it as a duplicate because of my gold hammer). – Stephen Kitt Jul 27 '17 at 11:49