Re: [gentoo-security] System knockout :-(

[Tobias Weisserth]

Hi Matthew,

cummings@××××××××.net schrieb:

>On Sat, 3 Apr 2004, Tobias Weisserth wrote:
>
>
>
>>Backups are not the problem... Reinstalling a perfectly well tuned
>>Gentoo system gives me the shivers... I'm seriously thinking of using
>>mirrored raid partitions next time.
>>
>>
>
>I considered a Raid 1 solution, but it's slow and has one major drawback.
>What happens if you get hacked because a security problem is slow to get
>patched?  With raid 1 both drives get hacked, but if you manually mirror
>the second drive on changes if you get hacked you would be able to swap
>them, update the problem, then mirror the fixed system to the previously
>hacked version, saving you the time of recompiling and tuning the system.
>
>
>

That's why I install and set up Tripwire right after I did a perfectly 
good installation. I don't know of any way an intruder could sneak 
around a good Tripwire setup. It's on all my machines first thing after 
system setup and before the network gets plugged in.

regards,
Tobias

--
gentoo-security@g.o mailing list