Linux Server Security, Second Edition

This is the Title of the Book, eMatter Edition

Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.

68

|

Chapter 3: Hardening Linux and Using iptables

For example, suppose that in the course of an upgrade session, apt-get reports that

it’s skipping the package blozzo. After apt-get finishes the rest of the upgrade ses-

sion, you can get a detailed view of what you’re getting into (in resolving blozzo’s

dependencies) by typing the command:

apt-cache show blozzo

If you next type:

apt-get install blozzo

apt-get will attempt to install the latest version of blozzo and will additionally do a

more thorough job of trying to resolve its dependencies. If your old version of blozzo

is hopelessly obsolete, however, it may be necessary to upgrade your entire distribu-

tion; this is done with the command

apt-get -u dist-upgrade.

Detailed instructions on using apt-get can be found in the apt-get(8) manpage and in

the APT HOWTO (available at http://www.debian.org/doc/manuals/apt-howto).

To receive prompt, official notification of Debian security fixes, subscribe to the

debian-security-announce email list. An online subscription form is available at http://

www.debian.org/MailingLists/subscribe.

Unfortunately, the deb package format doesn’t currently support

GNUpg signatures, or even md5 hashes; nor are external hashes or

GNUpg signatures maintained or checked. Therefore, be careful to

stick to official ...