[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: New monit web-interface

From: Martin Pala
Subject: Re: New monit web-interface
Date: Fri, 12 Jul 2002 13:12:11 +0200
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020607

Jan-Henrik Haukeland wrote:
Martin Pala <address@hidden> writes:

Problem is, that mtime can easily be modified (for example by unix
'touch' command). Its not big problem for intruder to mangle this

I know, I was think appart from mangling that it could be a good
Anyway, given Thomas and your's objections about changing the checksum
feature which, BTW I agree with - I wasn't thinking about mangling. I
think the best thing is to leave the checksum function as is.
Because if a user choose to checksum a file he will probably want to
pay the extra penalty the test takes in CPU cycles. I mean, for a
program like monit, correctness is more important than speed.

+1 for not changing the checksum function


when checksum will depend on time, it will be fast useless => when the performance is the issue, it will be better to not enable checksum (as you described). In the case that checksum depends on time it can only be useful against "dumb" intruders.

+1 for not changing the checksum function


reply via email to

[Prev in Thread] Current Thread [Next in Thread]