Digitally signed RPMs in Kickstart

Hajducko, Steven steven.hajducko at digitalinsight.com
Wed Mar 21 19:09:04 UTC 2007


Is it possible to have Kickstart verify digital signatures on RPMs
during the installation process?

We want to have a kickstart server that serves several different network
tiers, however, our security team is concerned that if an attacker were
to get onto the system, they could replace some of the RPM's with his
own and each time a new system was kickstarted, would have the bogus
RPM.

--
sh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/kickstart-list/attachments/20070321/2323c7a5/attachment.htm>


More information about the Kickstart-list mailing list