Jesse Keating wrote:
On Wednesday 07 April 2004 14:25, Richard Hally wrote:
>Rpm can put files just about anywhere. The installer (anaconda) is a
>corner case but rpm certainly could be a method of attack and as you
>say rpm doesn't always account for a packages files. Looks like a
>trojaned rpm would work and be difficult to spot.
>
>
Which is why you shouldn't be installing rouge rpms that are unsigned by
a trusted source (like Red Hat). And really, there are more direct and
equally untrackable ways to own a box w/ a trojan rpm than disabling
your SELinux.
So you are saying that some one can "own a box" (whatever that means)
while SELinux is in enforcing mode?
And do what? :)