491193 – provide boot cd to md5sum core system files

Bug 491193 - provide boot cd to md5sum core system files

Summary: provide boot cd to md5sum core system files

Status:	VERIFIED INVALID

Alias:	None

Product:	openSUSE 11.1
Classification:	openSUSE
Component:	Basesystem (show other bugs)
Version:	Final
Hardware:	All openSUSE 11.1

Priority:	P5 - None Severity: Enhancement with 1 vote (vote)
Target Milestone:	---
Assignee:	Security Team bot
QA Contact:	E-mail List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2009-04-01 16:48 UTC by Elmar Stellnberger
Modified:	2009-07-07 09:15 UTC (History)
CC List:	0 users

See Also:	https://fate.suse.com/306508
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Elmar Stellnberger 2009-04-01 16:48:09 UTC

User-Agent:       Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.10 (like Gecko) SUSE

  Provide a boot cd that downloads and compares the md5sums of all relevant core files in order to check them (for the current update-state of the system). 
  Programs like chkrootkit or rkhunter can only check for a certain number of known rootkits, slightly modified ones can not be detected.

i.e. provide a program like debsums for OpenSuse and also provide a ready-to-download iso image because a cracker can alter debsums or susesums as well.

Reproducible: Always

Comment 1 Elmar Stellnberger 2009-04-01 16:52:27 UTC

sha1 may be a better choice than md5sum

Comment 3 Thomas Biege 2009-04-14 16:24:30 UTC

This looks more like a feature request. Please use FATE.

Comment 4 Elmar Stellnberger 2009-04-14 16:30:55 UTC

Unfortunately I do not have access to Fate. If you think of it as a good idea and in a fact it certainly is, please post it for me on OpenFate. How else should we make sure whether a Suse-installation has been hacked or not?? rpm -qva, chkrootkit & co won`t do the job! ... and it is a really important topic, isn`t it?

Comment 5 Elmar Stellnberger 2009-07-07 09:15:36 UTC

see https://features.opensuse.org/306508 for an openfate entry.