Business case for switching to Linux

Lennart Sorensen lsorense-1wCw9BSqJbv44Nm34jS7GywD8/FfD2ys at public.gmane.org
Tue Apr 11 14:27:56 UTC 2006


On Mon, Apr 10, 2006 at 08:51:03PM -0400, John Van Ostrand wrote:
> rpm -Va will tell you that it was modified, it's up to you to check the
> file.
> 
> A quick reboot and a clean rpm -Va followed by a ps, netstat, etc will
> ensure that you've caught everything.

Assuming you can trust the rpm binary, the rpm database, anything else
on the system.  Once compromised, you can't trust ANYTHING on the
system.  Boot from some other media, running only tools from that
media, and trust nothing from the original install, including the data
without verifying it.

Len Sorensen
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml





More information about the Legacy mailing list