Re: ifupdown writes to /etc... a bug?
On Sat, Mar 22, 2003 at 08:19:24PM -0000, Matt Ryan wrote:
> > Dead simple. try to install a rootkit on a CD or a harddisk with the
> > RO jumper set.
> >
> > You can't write to a read only medium and hacking a drives bios to
> > circumvent the RO jumper is hopefully impossible.
>
> We are going from the sublime to the ridiculous. Are we suggesting that if
> it was made easier a significant number of Debian users would implement a
> root fs on a ro medium like cdrom? If not (and I suspect this is not the
> case) then without additional layers of security (listed by Russell) we
> don't gain any tangible benefit for the effort involved in implementing
> this. I know software starts out with bugs and problems but it already
> appears non-trivial to implement this (if I am reading the thread on the
> patched mount correctly).
There are other good reasons for wanting / ro, that have been discussed in
this rather huge thread.
--
Nick Phillips -- nwp@lemon-computing.com
Fine day for friends.
So-so day for you.
Reply to: