Re: /boot partition changes when it should not
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
thib wrote:
> maybe it would be acceptable to ask for a new little switch.
> Or hack ext3.
Ask who? The maintainers of tune2fs? The maintainers of ext3? Both will
say what I already know, that manually mounting and unmounting an ext3
partition read-only does not modify it in any way whatsoever, so the
problem lies with whatever modifies my partition (boot process).
The maintainers of the kernel?
> You mean a rootkit detection tool or something? Is it some kind
> of offline system you plug-in to boot the system after doing some basic
> checks?
Good guess. Yes.
> Anyway, you should use a smarter tool, I guess, one that can understand
> the filesystem and checksum the files inside, not the entire volume.
Storing many checksums (one for each file) takes a storage mechanism to
write them to. Storing just one can be done in your head.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkuVsEQACgkQ+VSRxYk440/ybwCfZoPJ9B6BNFpzn2hfvJICp3bG
WsAAn0zkrnUOFVYM4JQ2XySrO9kyQpwq
=w4+r
-----END PGP SIGNATURE-----
Reply to: