Re: [linux-security] Checking remote servers

[Michael Stone <mstone itri loyola edu>]

Quoting Andrew Kuchling (akuchlin cnri reston va us):
> 	If the machine was sitting in front of you, you'd just reboot
> it with a boot floppy, and run a known-good version of RPM from the
> floppy, but that's not an option when the machine's on the other side
> of the country; someone local would have to reboot the machine every
> so often, run the verification, and then reboot again.

Why not put the whole root fs on a cdrom and run from there? Put the
hard drives on a separate controller that doesn't have boot code.

Mike Stone