Re: System integrity verification and other delusions

[D. J. Bernstein]

> > > > If you can verify /etc/aliases.db, why can't you verify the qmail files?
> > > The qmail binaries are static after installation.
> > Explain. Why would it be _harder_ to verify static files?
> Because they are different than the files on the CDROM.

Dumb response. The CDROM doesn't have your /etc/aliases.db either.

If you can make backups of /etc/aliases.db, why can't you make backups
of the qmail files?

If it's okay to reinstall /etc/aliases.db in a cleanup, why isn't it
okay to reinstall the qmail files?

---Dan