Subject: Re: verified executable kernel modification committed
To: Alistair Crooks <agc@wasabisystems.com>
From: grant beattie <grant@netbsd.org>
List: tech-security
Date: 10/30/2002 23:27:49
On Wed, Oct 30, 2002 at 01:23:59PM +0100, Alistair Crooks wrote:
> > Indeed it can. It can also hold the md5/sha1/rmd160 fingerprint for
> > the file too. Is there an mtree for pkg too?
>
> I prefer tripwire or aide for this kind of thing. There are packages
> for both of those.
True, though it does make some sense to ship it in the base
install as a known starting point (especially for when binary patches
become a reality).
g.