[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#15604: sha256sum (and others of the *sum family) lacks important opt
From: |
Hadmut Danisch |
Subject: |
bug#15604: sha256sum (and others of the *sum family) lacks important option |
Date: |
Sun, 13 Oct 2013 12:31:15 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0 |
Hi,
the hashsum check files like sha256sum would be quite usefull (and
improve security), if they could easily be used within shellscripts to
verify downloads. E.g. Ubuntu provides signed hash files like
http://releases.ubuntu.com/precise/SHA256SUMS
http://releases.ubuntu.com/precise/SHA256SUMS.gpg
But one rarely downloads all files, only the needed ones.
Unfortunately, sha256sum prints warnings and exits with exit status 1
when files are missing, even when the present files are correct. This
makes checking the files more difficult in shellscripts and might keep
most script authors from checking downloads.
It would be significantly more usefull and thus more secure if the *sum
commands had an additional option to not report missing files as an
error and to verify just the present files.
regards
Hadmut
- bug#15604: sha256sum (and others of the *sum family) lacks important option,
Hadmut Danisch <=