Eternal 'good file hashes' list

[Ralf Ertzinger]

Hi.

On Wed, 21 Oct 2009 22:50:42 +0200, nodata wrote:

> Running on the compromised system, or running somewhere else?
> Where are you running rpm from?

Running from an external boot medium (CD/DVD/USB stick/whatever), not
from within the (possibly compromised) system itself. The known good
signatures could be included on the boot media, or pulled from the
network (if available) on demand.