tripwire and virtual machines
tripwire and virtual machines
Posted Jul 15, 2009 23:33 UTC (Wed) by tridge (subscriber, #26906)Parent article: Is pre-linking worth it?
I've hit two other problems with pre-linking.
The first is when I use tools that try to detect breakins by checking for changes in the MD5 sum of binaries. You can get a lot of false alarms after pre-linking.
The second is virtualisation. I often use kvm with qcow2, using a shared base image between machines. When pre-linking runs, the binaries are rewritten inside each virtual machine, meaning they are no longer in common. This makes it slower, as well as taking up a lot more disk.
For most servers I think pre-linking isn't worth it. For desktop machines perhaps it's worthwhile, although I'm dubious there too.
Cheers, Tridge
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.