OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Phil Stracchino (alaricBABCOM.COM)
Date: Mon Apr 16 2001 - 18:10:43 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, Apr 13, 2001 at 10:48:48AM -0400, Jason E Calvert wrote:
    > Should we start a project? Say a database for different OS's, SUID programs,
    > why, and md5 sums...
    > anyone game?
    > I have a shell script to give md5 sums on suid root programs. We could start a
    > email alias to send the results to and toss the outliers aside for examination
    > to get a quick start.

    The problem with this is every time someone patches a system binary,
    rebuilds against different libraries, rebuilds with a different compiler,
    rebuilds with different optimizations, etc, the md5sum database breaks.
    You can't possibly allow for all the possible variations outside a single
    site.

    --
     Linux Now!   ..........Because friends don't let friends use Microsoft.
     phil stracchino   --   the renaissance man   --   mystic zen biker geek
        Vr00m:  2000 Honda CBR929RR   --   Cage:  2000 Dodge Intrepid R/T
     Previous vr00mage:  1986 VF500F (sold), 1991 VFR750F3 (foully murdered)