Hi
At 12:10 21.03.2004 +, The Meddler wrote:
I have an old laptop which has a floppy and two pcmcia slots that I wanted
to use for LRP. It doesn't like 168k disks very much and I liked the speed
of booting off a hard disk, but I was not so keen on the fact that the HD is
writable.
I came up with an idea, that might make booting off a hard disk slightly
more secure and have got a proof of concept working.
The basic concept was to create an iso image with the lrp packages and put
that on the hard disk.
Then with a little hacking of linuxrc, I persuaded it to mount the iso image
using loop and then load the additional packages from the iso image.
It does make it a lot harder for someone breaking in to change the
configuration fo the router. They would need to create their own iso image
and replace the one in the router with it. It wouldnt be a good idea to
install samba.lrp on such a system. Though it would be possible to get
linuxrc to check the md5 checksum of the image before loading, (assumimg you
were loading initrd from a write protected floppy)
Ive managed to get it working, loading initrd from the floppy and the rest
of the modules from the image file.
Do you think its worth continuing along these lines?
Personally I doubt it. Reading and building an ISO filesystem is rather trivial and
should your LEAF box ever be compromised replacing the ISO file is easy. I would
rather just remove the modules for IDE support from memory at the end if the init
process. Then you need to either plug those in again (loading them across the link) or
reboot to access the hard disk at all. You could even boot off the harddisk that way,
forgetting the floppy alltogether.
my 0.02
Erich
THINK
Püntenstrasse 39
8143 Stallikon
mailto:[EMAIL PROTECTED]
PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70alloc_id638op=click
___
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel
