Re: securing a unix system - suggestions on checking for intrusions

Robin Sheat <[email protected]>
Newsgroups gmane.org.user-groups.linux.new-zealand.general
Message-ID <1317866096.11495.44.camel@zarathud>
Op donderdag 06-10-2011 om 13:43 uur [tijdzone +1300], schreef Robin
Paulson:
>  i would guess to check for suspicious files that have replaced files 
>  from the repo? i.e. ensuring you've still got the exact binary
> installed 
>  that you want/should have? 

But, is it checking the sigs on the binaries, or just that the RPM you
installed was fine?

Actually, if every manifest contains the hash of each installed file,
and that manifest is signed, then it would be useful to verify the
integrity of those aspects of the system.

But I don't think it's doing that.

Robin.

_______________________________________________
NZLUG mailing list [email protected]
http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug
signature.asc (application/pgp-signature, 198 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk6NCmkACgkQFNNkhamc6203+wCcClREdtXEBJVgkGM9sIMDNrOm
s2QAoI1Lv82GojezgSrB8jg7LxIwY+SK
=hKHQ
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.