Thanks for the advice, Kent.  I agree, and I plan to reinstall.  However,
I'd really prefer to do it from the included CDs, if they're legit.  (I'd
also like to know if they're NOT legit!)

Is there anyone out there who can provide a method to checksum the CDs?  I
did linux mediacheck, thinking that would give me an MD5 checksum, but all
it did was say "PASS."  I guess that checks for internal consistency, but
that doesn't help me confirm that the CDs match Red Hat's.

And md5sum takes a file as input, so I can't do that to the entire CD.  I
got the checksums from RH's FTP server, but I don't know what to compare
them to determine authenticity of the CDs.  Unfortunately, I'm not that
proficient at this stuff to know what to do next, so any ideas (or complete
solutions ;) would be very much appreciated.

Thanks in advance,
Lee Grey
http://www.optioninsight.com


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kent Borg
Sent: Wednesday, August 14, 2002 5:59 PM
To: [EMAIL PROTECTED]
Subject: Re: Is there any way to confirm that a third-party install is
not compromised?


On Wed, Aug 14, 2002 at 12:02:30AM -0400, Lee Grey wrote:
> Short of wiping the hard drive, tossing out the provided CDs, and
> reinstalling from Red Hat's server, is there any way to confirm that this
> installation is clean and sober?

No, not as easily as just wiping it.

Wipe it.  It is easy and takes little time to do--unless something
goes wrong, and if something is going to go wrong you want to do it
now instead of later.  And if you do you will know, as exactly as you
want, just how your box is built.

As for the CDs, you could do a checksum of them and see if they match
the numbers published by Red Hat.  (How to do a checksum?  I haven't
worked out the details, but in general, make .iso images and md5sum
them.  Or maybe pipe an the image creation into md5 and never park
copies on your disk.)

If that is too complicated, then get new CDs.  Either in a Red Hat
package (they deserve support), or copies from someone like
cheapbytes.com.


-kb






-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to