If you want to create and sign RPM packages for Enterprise Linux 5 and 6 you will have to consider some things while creating and using the GPG key so that EL5 systems can also use the signed packages.

If you create a GPG key using the standard settings and sign a RPM package under EL6 you will get the following error …

If you want to have a short overview about which files of installed RPM packages has been altered, you probably don't want to deal with AIDE - a short script should be enough:

 1#!/bin/sh
 2for i in $(rpm -qa|tr "n" " ")
 3do
 4        RESULT="$(rpm -vV $i)"
 5        if [ "$?" != …