I want to make sure that nobody changed a file. In order to accomplish that, I want not only to check MD5 sum of the file, but also check its size, since as far as I understand this additional simple check can sophisticate falsification by several digits.
May I trust the size that
stat returns? I don't mean if changes were made to
stat itself. I don't go that deep. But, for instance, may one compromise the file size that
stat returns by hacking the directory file? Or by similar means, that do not require superuser privileges?