« Home | Wow, I'll be damned. You know how I said there we... » | Ahh, for the want of broadband at home: Hot Sna... » | Laura and I went to the Hot Snakes show last night... » | You know what sucks about 60 gig drives? Defraggi... » | And I thought acid was bad:Laura's older sister Ca... » | And I thought wasps were bad:Laura works at the Sc... » | Facts about poop. If you work in an office enviro... » | Can't view thumbnails in Windows 2000? Broken im... » | The things a boy will do for internet access: As ... » | "I can't belive this chipset isn't supported." "D... »

A new project I would like to work on:

A simple BSD or Linux boot disk that contains a few utilities for testing for a hacked box. Initially, the system administrator would boot off this floppy and run the initialization utilitity. It would take an MD5 hash of all the files in specific directories (such as /etc, /bin, /sbin and /usr/bin) and store the results in a text file. Later on, the system administrator could boot off this floppy again and run the comparison utility. It would take another MD5 hash of all the files and compare the results.

Doing this in BSD would be easier for me because I have access to many BSD machines. Doing it in Linux would make it much more widely supported. Can the stock Linux kernel mount FFS file systems? I know OpenBSD can mount Ext2 file systems. Red Hat now uses Ext3 by default, so it would only work with older RH systems. Hopefully I will be able to create a boot disk that would work with most any unix system.

This project could also use Tripwire or a pre-made system disk. Or maybe I will just do it all from scratch just to be a jerk.