Re: [linux-security] Re: Re: Re: Bind Overrun Bug and Linux

[wietse porcupine org (Wietse Venema)]

Leigh Porter:
> I keep a secret store of such handy things as ls, ps etc on all my systems and
> every
> night I have a process check the md5sum of every config/binary/lib on the box
> and report any problems to me.
> 
> No it's not fun :)

Beware, the kernel open() routine does not necessarily give you
the same file as the kernel exec() routine. Your checksum does
not necessarily apply to the file being executed.

	Wietse