How do I verify if some binary files installed via rpm in RHEL have been replaced?
Issue
- How do I verify if binary files installed via rpm have been changed ?
- Can I check if important commands files like ps, ls, or top have been replaced by an attacker?
Environment
- Red Hat Enterprise Linux all versions.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
