Re: when to unpack packages (was: Re: [Devil-linux-develop] Beta 6 :) Luv it, Lnx Society Meeting Tue)

[Friedrich L. <fl...@fl...>]

On Mon, 8 Apr 2002 21:15, Heiko Zuerker wrote:

> I would like to keep the installation of the packages inside Initrd.
> I planned to encrypt the tarballs of the packages, to make it harder
> for an intruder add software after he managed to break into the
> system. Currently he has just to run tar -xzf
> /cdrom/packages/XYZ.tar.gz .

Ok, point taken. So you're right we need LVM (just /sbin/vgscan,
/sbin/vgchange and libs) in the initrd.


> We could add only the really needed tools to initialize the LVM.
> Or we could just work with symlinks to the SHMFS.

I suggest we put chroot on the intial ramdisk then we run the LVM
utilities chroot /dev/shm, so when we switch to the real root
everything is in place.

BTW when you want to be more secure then we should get rid of the
/etc/initrd dir and should not rely on possibly forgable scripts.

-- 
MfG / Regards
Friedrich Lobenstock