DE

↑ ↓ select, Enter open, Esc close

Find modified package configuration files

harmless rootDebian and APTdebian, ubuntu
root@server
debsums -ce

Compares the checksums of all configuration files (-e) of installed packages with their original values and prints only modified files (-c). Useful when taking over someone else’s server, before a distribution upgrade or when looking for unexpected changes. Without -e, all package files are checked, which can also reveal tampered program files.

Note: debsums must be installed first (apt install debsums). It is no substitute for an integrity check after a break-in, since an attacker can modify the checksums too.

Also searched as

  • which config files were modified debian
  • find changes to default package config
  • debsums changed files

Related one-liners

All in Debian and APT

Compare installed and available package versions

$apt-cache policy nginx
harmlessDebian and APT

Find the package that provides a file not yet installed

$apt-file search bin/mysqldump
harmlessDebian and APT

Find which installed package a file belongs to

$dpkg -S /usr/bin/curl
harmlessDebian and APT

List installed packages sorted by size

$dpkg-query -Wf '${Installed-Size}\t${Package}\n' | sort -rn | head -n 20
harmlessDebian and APT

Show available package updates

#apt update && apt list --upgradable
harmlessDebian and APT

Change service settings with an override

#systemctl edit mariadb
cautionsystemd

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.