🚀 go-pugleaf

In article <1992Sep7.102653.18888@zooid.guild.org> ross@zooid.guild.org (Ross Ridge) writes:
>>This is one possible way to do it on floppy-equipped systems (say, an
>>SS2 or IPX or whatever).  Maybe this should go in the docs?
>
>While this would be what I'd do, even this isn't 100% guaranteed if
>someone has broken security on the machine.  It's possible, for instance,
>that the mount command, shell or even kernel has been hacked to prevent
>tripwire from doing it's job properly.

So flip the write-protect switch on the floppy.  No program is a
panacea.  This sounds like a wonderful tool, regardless.

Without knowing the full mechanism by which tripwire works, discussions
like this are of limited usefulness.  If your system regularly has been
compromised to the point that you can't trust your kernel, you
shouldn't be trusting Tripwire alone anyway.  If we're going to be
paranoid, make a miniroot disk, and put all the stuff on there.  I
kinda doubt it would all fit, however.  A floppy with tripwire, related
programs, a known good copy of the runtime C library, and the database
should be enough.

--Dave
-- 
System Administrator, Population Research Institute    barr@pop.psu.edu
  Contains: Carbonated water, high fructose corn syrup and/or sugar, caramel 
  color, phosphoric acid, caffeine, citric acid and natural flavorings.