[nzlug] Urgent: Load balancing / network monitoring / security

[Robin Sheat]

On Sunday 16 September 2007 15:42:05 Steve Holdoway wrote:
> Hmm... maybe I should be saving my fcheck database elsewhere...?
The only foolproof method is to store it on read-only media, and boot the 
machine from a live CD or similar to run the tests. Anything else can be 
compromised. Of course, as with most security things, there's a probabilistic 
tradeoff: doing an off line test is a large hassle, and it's not likely that 
the fcheck executable or the kernel will be modified to make it look like 
it's passed when in fact it hasn't.

-- 
Robin <robin at kallisti.net.nz> JabberID: <eythian at jabber.kallisti.net.nz>

Hostes alienigeni me abduxerunt. Qui annus est?

PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.linux.net.nz/pipermail/nzlug/attachments/20070916/3010610a/attachment.pgp