Re: System integrity verification and other delusions

[Peter C. Norton]

On Tue, Dec 22, 1998 at 09:54:56PM -0000, D. J. Bernstein wrote:
> How, pray tell, are you going to check the integrity of /etc/aliases.db?
> If you can verify /etc/aliases.db, why can't you verify the qmail files?

The qmail binaries are static after installation.  /etc/aliases.db
however is a dynamic file.  However verifying it can be easily done by
a human with fairly standard interperters like perl, or python, or
with a small c program.  In fact, these programs could easily parse
for the tokens that indicate danger.  Can I do this with qmail's
binaries?

-Peter