[Devil-linux-develop] securing packages

[Heiko Z. <he...@zu...>]

Hi,

I was thinking about securing the additional packages.
When somebody got into the system, he is able to install more packages just by unpacking the archives.

I thought, we could encrypt the packages with a key, which is generated when the ISO is being created.
This key is then stored inside the initrd, which is not accessible.

It's not 100% secure, but it gives an intruder one more problem.

What do you think about it?
And what program should be used to encrypt/decrypt the packages.

cu
  Heiko