Prev: Solaris 10 networking - Global zones
Next: RBAC and EMC SymCLI : Access denied - you are not an authorized base daemon user
From: Tim Bradshaw on 2 Aug 2008 09:24
On Jul 29, 1:19 pm, Casper H.S. Dik <Casper....(a)Sun.COM> wrote:

> But if the systen is compromised there's no point in running the
> forensic tools on that system, statically linked or not.

I don't know a lot about the sort of things people do in that world,
but I think there are cases where you're trying to catch some bad guy
in the act so you set up something which you know they'll attack, and
try and have something which will watch them as they do it.

But making that (a bit) harder seems to me to be some tiny, tiny cost
compared with the cost of static linking
First  |  Prev  | 
Pages: 1 2 3
Prev: Solaris 10 networking - Global zones
Next: RBAC and EMC SymCLI : Access denied - you are not an authorized base daemon user