Re: [Devil-linux-develop] remote update

[Friedrich L. <fl...@fl...>]

Heiko Zuerker wrote on 08.02.2004 16:21 MET:
> The major problem is that it's easy to temper with the verification of 
> the signature, by replacing the initrd on the memory stick.

Then initrd needs to check its own signature first. If this does not
check out - hold the damned thing so the users _has to_ manually
intervene.

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock                       Linux Services Lobenstock
URL: http://www.lsl.at/                         Email: fl...@fl...
____________________________________________________________________