My sysadmin toolbox (Linux.com) [LWN.net]

My sysadmin toolbox (Linux.com)

Posted Apr 24, 2006 16:26 UTC (Mon) by xorbe (guest, #3165)
In reply to: My sysadmin toolbox (Linux.com) by RPD
Parent article: My sysadmin toolbox (Linux.com)

or a bad guy that drops an rpm binary that never fails while checking other replaced binaries.

to post comments

My sysadmin toolbox (Linux.com)

Posted Apr 24, 2006 17:30 UTC (Mon) by danielpf (guest, #4723) [Link] (1 responses)

If the bad person is able to install a fake rpm it means s/he can
also do pretty much anything, including installing a fake
tripwire.

My sysadmin toolbox (Linux.com)

Posted Apr 24, 2006 19:31 UTC (Mon) by jwb (guest, #15467) [Link]

That's why you shut down the system and boot it from protected media before running tripwire. Someone with root access to a Unix system can, indeed, do anything.