Re: A place to start

[Ray L <rayl@optitech.com>]

On Sun, Jun 11, 2000 at 11:14:50AM -0700, David Ford wrote:
> If we do it section by section, it's not very hard to keep up, even with
> daily releases of kernels.  All we need to do is keep a list of when
> "drivers/net/arp.c" was last audited and the md5sum of the file.  As long as
> that md5sum doesn't change, the value of our audit remains the same as we
> placed on it.

not true in general, unfortunately.  a change in another file might prevent
arp.c from even compiling, let alone implementing correct semantics.  md5sums
are certainly valid for a large class of errors, but not all.


-- 
-----------------------------------------------------------------------------
  Ray Lehtiniemi (rayl@mail.com) (rayl@optitech.com)


Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/