version 1.68, 2004/08/25 19:59:29 |
version 1.69, 2005/01/06 00:00:38 |
|
|
# |
# |
# Create the mtree tree specifications using: |
# Create the mtree tree specifications using: |
# |
# |
# mtree -cx -pDIR -kcksum,gid,mode,nlink,size,link,time,uid > DIR.secure |
# mtree -cx -p DIR -K md5digest,type >/etc/mtree/DIR.secure |
# chown root:wheel DIR.secure |
# chown root:wheel /etc/mtree/DIR.secure |
# chmod 600 DIR.secure |
# chmod 600 /etc/mtree/DIR.secure |
# |
# |
# Note, this is not complete protection against Trojan horsed binaries, as |
# Note, this is not complete protection against Trojan horsed binaries, as |
# the hacker can modify the tree specification to match the replaced binary. |
# the hacker can modify the tree specification to match the replaced binary. |