Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is hopefully a simple question. Are there any tools out there to find out an enhanced description (beyond the normal rpm command) of the contents of an rpm, and possibly decompile it? We currently have an rpm from our company's security team which is supposed to be used for centralized authentication on our linux servers. The issue is that they can't supply source, and don't have a documented list of all changes that are made on the server. They did say that decompiling the rpm was ok.

So, any ideas??

share|improve this question
up vote 7 down vote accepted

Look at RPM2CPIO and objdump.

share|improve this answer

Here's a nice post that goes through various options of getting into packages:

Here's the gist of it for an RPM:

$ rpm2cpio package.rpm | cpio  -idmv
share|improve this answer

Thanks for the help everyone! It turns out that 7zip could extract the rpm to a cpio package, which again 7zip could extract to expose the files that are placed in the system. I really appreciate the help, thank you!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.