Re: [Devil-linux-develop] DL completely contained on CD?

[Thomas E. <tho...@bu...>]

Great idea!

-- 
cu thomas

Bruce Smith wrote:
> I came up with the brilliant idea the other day, and would like some
> input.  (go ahead and tell me if it's a dumb idea, I don't care! :)
> 
> I might have an application to put a DL router/firewall internally in
> our company to firewall off a department we don't trust.  The problem is
> this PC cannot be in a secure location (untrusted employees have access)
> 
> I don't really want anyone taking the floppy or USB stick out of the PC,
> mucking with it, and replacing it.  So what if the etc.tar.bz2 file was
> also on the CDROM?  People cannot eject the CD from a running DL PC, and
> if they shutdown the DL PC to remove the CD, I would know about it from
> my opennms monitoring software.
> 
> It would be easy to hack the linuxrc startup script, and say if
> /cdrom/config/etc-static.tar.gz2 exists, then completely ignore the
> floppy and USB devices, and ONLY untar the static etc file from CD.
> 
> How hard would it be to write a script that would read a DL CD (or ISO),
> replace one file on it, and write a new ISO image?  This script would
> need to run in a normal Linux distribution (Redhat/SuSE/...), not from
> the chroot development environment.  
> 
>  - BS
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
> at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
> _______________________________________________
> Devil-linux-develop mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop