On Thu, Apr 27, 2000 at 01:36:23PM +0200, Tollef Fog Heen wrote: > * Ethan Benson > > | one neat way would be a CD-RW, have both an ordinary CDROM and a > | CD-RW drive, when you upgrade or install something move the > | checksums cd-rw to the RW drive, update it then take it out and put > | it back in the CDROM drive. theres no modifying a CD-r[w] from a > | CDROM drive. this system would break down on remotely administered > | systems however. > > or having the checksums on a separate host, heavily locked down and `heavily locked down' and `running NFS' is a contradiction ;-) > exporting those checksums from there ro, while logging into that > system, reexporting the checksums rw, updating the system, reexport > ro. NFS-over-SSH should work ok. Still, one has to have one system > which one trusts if you are to remote administer it. yes there is a certain problem there, though ssh with RSA only login helps. is there a secure RPC implementation for GNU/Linux? -- Ethan Benson http://www.alaska.net/~erbenson/
Attachment:
pgpqZXUzXkvyf.pgp
Description: PGP signature