OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Certifying a RedHat Install

From: abe (abeabeowitz.com)
Date: Wed Jul 14 2004 - 12:37:48 CDT


My client wants me to certify there are no back doors in the RedHat 9
server we are going to deliver. It's a base RH9 install with a few
extra RPM's, like Guarddog.

Question is what's the best way for us to certify this?
* rpm -Va ?
* A global md5 on each file?

Also, what's the best way to minimize liability if they are hacked? I
don't want to get sued because the were negligent.

Thanks,

Abe