On Sun, Feb 16, 2003 at 04:08:02PM -0800, Mike Noyes said:
> On Sun, 2003-02-16 at 15:47, Simon Blake wrote:
> > What I was asking was what real,tangible benefit write protecting the
> > boot media gives you, and is that benefit worth anything against the
> > extra hassle of having a write protected boot media.
> 
> Simon,
> I'm pretty sure you're aware of the FAQ below, but here it is anyway. If
> nothing else, it gives you a base to diff for trojans etc.

root@bering:$ diff 
diff: not found

Mmm, I can't imagine a worse platform to try and track a trojan on -
slip in a hacked busybox, and you'd be good to go.

I guess it does provide a basis for forensics, but OTOH, keeping a copy
of your packages on another machine would allow you to do that as well
(and we all backup our LEAF machines religiously, don't we :-).

So I'm still not convinced that read only boot media adds any meaningful
additional security to a LEAF box.

Cheers
Si
 
> # Why Should I Use It?
> http://sourceforge.net/docman/display_doc.php?docid=1739&group_id=13751
> 
> -- 
> Mike Noyes <mhnoyes @ users.sourceforge.net>
> http://sourceforge.net/users/mhnoyes/
> http://leaf-project.org/  http://sitedocs.sf.net/  http://ffl.sf.net/
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> 
> _______________________________________________
> leaf-devel mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-devel


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

_______________________________________________
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to