Immutable files

[Matthew Wilcox <willy@odie.barnet.ac.uk>]

>From a security point of view, it might be considered worthwhile to install
system executables (particularly the suid ones) and then mark them immutable.
This does stop some common attacks from succeeding, and it might prevent some
stupid things accidentally done as root.  My Debian 1.2.10 system (okay, it
was an oldish CD-ROM..) has no files marked as immutable.  Has this been
considered for the hamm release?


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .