tripwire and virtual machines
tripwire and virtual machines
Posted Jul 16, 2009 4:49 UTC (Thu) by gmaxwell (guest, #30048)In reply to: tripwire and virtual machines by tridge
Parent article: Is pre-linking worth it?
It's possible to get the unprelinked binary by processing the prelinked one. RPM's verify does this, so you can still do intrusion detection.
Of course, that process could be compromised but so could your md5sum. ::shrugs::