On Tue, 17 Dec 1996, Todd Graham Lewis wrote:
> On Mon, 16 Dec 1996, Arne Steinkamm wrote:
>
> > On a linux machine each hacker from the net, gained root privs. can change
> > it.
>
> If a hacker gains root on your firewall, haven't you, uhh, already lost?
Perhaps I am missing something here but I was under the impression that
this is *exactly* what the immutable/append only bits are for -- just in
case someone does gain root. It limits the damage and/or the possibility
of cleaning up after themselves. Is this not so? If not, what ARE they
good for?
cheers, kinch
References:
|
|