Date: Wed, 5 Apr 1995 08:29:02 -0700 (PDT) From: Poul-Henning Kamp <phk@ref.tfs.com> To: jkh@freefall.cdrom.com (Jordan K. Hubbard) Cc: current@freefall.cdrom.com Subject: Re: "Cookbook" for security. Message-ID: <199504051529.IAA08521@ref.tfs.com> In-Reply-To: <15076.797078123@freefall.cdrom.com> from "Jordan K. Hubbard" at Apr 5, 95 03:35:23 am
next in thread | previous in thread | raw e-mail | index | archive | help
> Poul and I were talking about the whole immutable flag issue, and > since cpio, tar, pax and friends don't support the notion of > extracting these extra flags ANYWAY, we might as well make a virtue of > a vice and go "cookbook" style on it, where some central well-known > file contains information that can be used to apply the flags in > question after the system is installed. For that matter, the file can > also contain MD5 checksums so that you can verify that all the > "important" files have not been changed from the release copies. > Needless to say, the "cookbook" file should be highly immutable itself > in these cases :-). living on a CD-ROM or write-protected floppy it will be... -- Poul-Henning Kamp <phk@login.dknet.dk> -- TRW Financial Systems, Inc. 'All relevant people are pertinent' && 'All rude people are impertinent' => 'no rude people are relevant'
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199504051529.IAA08521>