who provides /etc/sysconfig/selinux?
Greg.Lehmann at csiro.au
Greg.Lehmann at csiro.au
Wed Apr 7 23:59:13 UTC 2004
Either you don't know how to spell rogue or you have dyslexic fingers. I
have seen you do this on more than one occasion. Seeing rouge really
confused me for a bit...
> -----Original Message-----
> From: fedora-test-list-bounces at redhat.com
> [mailto:fedora-test-list-bounces at redhat.com] On Behalf Of
> Jesse Keating
> Sent: Thursday, 8 April 2004 7:52 AM
> To: fedora-test-list at redhat.com
> Subject: Re: who provides /etc/sysconfig/selinux?
>
>
> On Wednesday 07 April 2004 14:25, Richard Hally wrote:
> > Rpm can put files just about anywhere. The installer
> (anaconda) is a
> > corner case but rpm certainly could be a method of attack and as you
> > say rpm doesn't always account for a packages files. Looks like a
> > trojaned rpm would work and be difficult to spot.
>
> Which is why you shouldn't be installing rouge rpms that are
> unsigned by
> a trusted source (like Red Hat). And really, there are more
> direct and
> equally untrackable ways to own a box w/ a trojan rpm than disabling
> your SELinux.
>
> --
> Jesse Keating RHCE (geek.j2solutions.net)
> Fedora Legacy Team (www.fedoralegacy.org)
> GPG Public Key
> (geek.j2solutions.net/jkeating.j2solutions.pub)
>
> Was I helpful? Let others know:
> http://svcs.affero.net/rm.php?r=jkeating
>
More information about the fedora-test-list
mailing list