Question regarding pacman -Qkk output warnings for mismatched checksums, times, permissions, & sizes of sensitive files & mirrors

I’m not a complete newb, but I’m no expert either, but please don’t think I’m being critical…I’ve just come across something I’m not used to (I used Ubuntu for years but only as a set top box & laptop, never an always on server so I never thought to, or even knew if it was possible to, validate a checksum post-install)…& I found some FUD on youtube when googling for answers.

Anyway, I know some, if not most/all, of these files likely get modified during normal use (changing user name, adding a user or group, etc), but the fact that things like shell, pam, pamac, & (especially) that the raspi firmware & manjaro rpi modules are listed as altered with mismatched hashes has me curious & a little concerned. So could someone please take a glance at the list below (relevant output of pacman -Qkk) & tell me if I should be worried or not?

Plus, those mirrors with mismatched checksums seems to add a touch of credibility (at least to the uninitiated) to that youtube video I found. It draws attention to (or makes allegations of) recent security related faux pas (ssl expiry, shipping packages prior to release by upstream-ie openssl vulnerability, etc) by Manjaro Gmbh-corp (the ytber didn’t blame the dev team, but speculated the root cause likely fell from above). Whatever, anyway, sorry, too long…

Also, and this is probably my inexperience with selinux, but…that and iptables (which I am more familiar with), will not persist through a reboot (warnings or disabled in dmesg)…& may not ever even initialize (not seen in htop), but I realized this just now so I haven’t done much digging…prolly something I’m doing unless the issue above is real & impacting this.

TLDR; will someone with more experience than me tell me if what is pasted below is any cause for concern

f2fs-tools: 36 total files, 0 alterwarning: firmware-raspberrypi: /usr/lib/firmware/updates/brcm/brcmfmac43455-sdio.txt (Modification time mismatch)
ed files
backup file: filesystem: /etc/fstab (Modification time mismatch)
backup file: filesystem: /etc/fstab (Size mismatch)
backup file: filesystem: /etc/fstab (MD5 checksum mismatch)
backup file: filesystem: /etc/fstab (SHA256 checksum mismatch)
backup file: filesystem: /etc/group (Modification time mismatch)
backup file: filesystem: /etc/group (Size mismatch)
backup file: filesystem: /etc/group (MD5 checksum mismatch)
backup file: filesystem: /etc/group (SHA256 checksum mismatch)
backup file: filesystem: /etc/gshadow (Modification time mismatch)
backup file: filesystem: /etc/gshadow (Size mismatch)
backup file: filesystem: /etc/gshadow (MD5 checksum mismatch)
backup file: filesystem: /etc/gshadow (SHA256 checksum mismatch)
backup file: filesystem: /etc/hosts (Modification time mismatch)
backup file: filesystem: /etc/hosts (Size mismatch)
backup file: filesystem: /etc/hosts (MD5 checksum mismatch)
backup file: filesystem: /etc/hosts (SHA256 checksum mismatch)
backup file: filesystem: /etc/passwd (Modification time mismatch)
backup file: filesystem: /etc/passwd (Size mismatch)
backup file: filesystem: /etc/passwd (MD5 checksum mismatch)
backup file: filesystem: /etc/passwd (SHA256 checksum mismatch)
backup file: filesystem: /etc/resolv.conf (Modification time mismatch)
backup file: filesystem: /etc/resolv.conf (Size mismatch)
backup file: filesystem: /etc/resolv.conf (MD5 checksum mismatch)
backup file: filesystem: /etc/resolv.conf (SHA256 checksum mismatch)
backup file: filesystem: /etc/shadow (Modification time mismatch)
backup file: filesystem: /etc/shadow (Size mismatch)
backup file: filesystem: /etc/shadow (MD5 checksum mismatch)
backup file: filesystem: /etc/shadow (SHA256 checksum mismatch)
backup file: filesystem: /etc/shells (Modification time mismatch)
backup file: filesystem: /etc/shells (Size mismatch)
backup file: filesystem: /etc/shells (MD5 checksum mismatch)
backup file: filesystem: /etc/shells (SHA256 checksum mismatch)
firmware-raspberrypi: 72 total files, 1 altered file
backup file: glibc: /etc/locale.gen (Modification time mismatch)
backup file: glibc: /etc/locale.gen (Size mismatch)
backup file: glibc: /etc/locale.gen (MD5 checksum mismatch)
backup file: glibc: /etc/locale.gen (SHA256 checksum mismatch)
backup file: libpamac: /etc/pamac.conf (Modification time mismatch)
backup file: libpamac: /etc/pamac.conf (Size mismatch)
backup file: libpamac: /etc/pamac.conf (MD5 checksum mismatch)
backup file: libpamac: /etc/pamac.conf (SHA256 checksum mismatch)
libtool: 7warning: libutempter: /usr/lib/utempter/utempter (GID mismatch)
warning: libutempter: /usr/lib/utempter/utempter (Permissions mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.alias (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.alias.bin (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.builtin.alias.bin (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.builtin.bin (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.dep (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.dep.bin (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.devname (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.softdep (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.symbols (Modification time mismatch)
warning: linux-rpi4: /usr/lib/modules/5.15.74-2-MANJARO-ARM-RPI/modules.symbols.bin (Modification time mismatch)
warning: manjaro-system: /etc/sudoers.d/10-installer (Permissions mismatch)
warning: manjaro-system: /etc/sudoers.d/10-installer (Modification time mismatch)
warning: manjaro-system: /etc/sudoers.d/10-installer (Size mismatch)
warning: manjaro-system: /etc/sudoers.d/10-installer (MD5 checksum mismatch)
warning: manjaro-system: /etc/sudoers.d/10-installer (SHA256 checksum mismatch)
libutempter: 20 total files, 1 altered file
manjaro-system: 18 total files, 1 altered file
backup file: mkinitcpio: /etc/mkinitcpio.conf (warning: networkmanager: /usr/lib/NetworkManager/conf.d/20-connectivity.conf (Modification time mismatch)
warning: networkmanager: /usr/lib/NetworkManager/conf.d/20-connectivity.conf (Size mismatch)
warning: networkmanager: /usr/lib/NetworkManager/conf.d/20-connectivity.conf (MD5 checksum mismatch)
warning: networkmanager: /usr/lib/NetworkManager/conf.d/20-connectivity.conf (SHA256 checksum mismatch)
warning: pacman-mirrors: /usr/share/pacman-mirrors/mirrors.json (Modification time mismatch)
warning: pacman-mirrors: /usr/share/pacman-mirrors/mirrors.json (Size mismatch)
warning: pacman-mirrors: /usr/share/pacman-mirrors/mirrors.json (MD5 checksum mismatch)
warning: pacman-mirrors: /usr/share/pacman-mirrors/mirrors.json (SHA256 checksum mismatch)
Modification time mismatch)
backup file: mkinitcpio: /etc/mkinitcpio.conf (Size mismatch)
backup file: mkinitcpio: /etc/mkinitcpio.conf (MD5 checksum mismatch)
backup file: mkinitcpio: /etc/mkinitcpio.conf (SHA256 checksum mismatch)
networkmanager: 510 total files, 1 altered file
backup file: pacman: /etc/pacman.conf (Modification time mismatch)
backup file: pacman: /etc/pacman.conf (Size mismatch)
backup file: pacman: /etc/pacman.conf (MD5 checksum mismatch)
backup file: pacman: /etc/pacman.conf (SHA256 checksum mismatch)
backup file: pacman-mirrors: /etc/pacman-mirrors.conf (Modification time mismatch)
backup file: pacman-mirrors: /etc/pacman-mirrors.conf (Size mismatch)
backup file: pacman-mirrors: /etc/pacman-mirrors.conf (MD5 checksum mismatch)
backup file: pacman-mirrors: /etc/pacman-mirrors.conf (SHA256 checksum mismatch)
pacman-mirrors: 344 total files, 1 altered file
backup file: pam: /etc/environment (Modification time mismatch)
backup file: pam: /etc/environment (Size mismatch)
backup file: pam: /etc/environment (MD5 checksum mismatch)
backup file: pam: /etc/environment (SHA256 checksum mismatch)
backup file: plymouth: /etc/plymouth/plymouthd.conf (Modification time mismatch)
backup file: plymouth: /etc/plymouth/plymouthd.conf (Size mismatch)
backup file: plymouth: /etc/plymouth/plymouthd.conf (MD5 checksum mismatch)
backup file: plymouth: /etc/plymouth/plymouthd.conf (SHA256 checksum mismatch)
ruby-concurrent: 1787 total files, warning: sddm: /usr/share/sddm/faces/.face.icon (Modification time mismatch)
warning: sddm: /usr/share/sddm/faces/.face.icon (Size mismatch)
warning: sddm: /usr/share/sddm/faces/.face.icon (MD5 checksum mismatch)
warning: sddm: /usr/share/sddm/faces/.face.icon (SHA256 checksum mismatch)
sddm: 228 total files, 1 altered file
sourwarning: sudo: /etc/sudoers.d (Permissions mismatch)
warning: systemd: /usr/lib/systemd/system/systemd-firstboot.service (No such file or directory)
warning: systemd: /var/log/journal (GID mismatch)
warning: vlc: /usr/lib/vlc/plugins/plugins.dat (Modification time mismatch)
warning: vlc: /usr/lib/vlc/plugins/plugins.dat (Size mismatch)
warning: vlc: /usr/lib/vlc/plugins/plugins.dat (MD5 checksum mismatch)
warning: vlc: /usr/lib/vlc/plugins/plugins.dat (SHA256 checksum mismatch)
backup file: sudo: /etc/sudoers (Modification time mismatch)
backup file: sudo: /etc/sudoers (Size mismatch)
backup file: sudo: /etc/sudoers (MD5 checksum mismatch)
backup file: sudo: /etc/sudoers (SHA256 checksum mismatch)
sudo: 233 total files, 1 altered file
systemd: 2044 total files, 2 altered files
vlc: 1052 total files, 1 altered file

Thank you all so much!

Switching from a Debian based system to an Arch based system will cause a lot of differences.

Most of the files is modified during install or is added as part of the profile’s desktop-overlay folder.

Files may also alter as part of your system maintenance.

There is nothing in the list that raises any concern.

3 Likes