Re: Checking integrity of /sbin/init from within kernel

[Markus Friedl <markus@openbsd.org>]

On Tue, Oct 01, 2002 at 11:52:23AM +0200, Torsten Valentin wrote:
> Physical access is no point here as that's not what I'm talking about. I
> know that this is the first thing to assure. But there are situations
> where you need more than this. And as I still think that my concept
> would help against more than 99 % of the crackers that would want to
> break into my machine, I still regard this as a good solution.

boot from a ramdisk kernel, don't compile ata or scsi support
into the kernel. much simpler, no modification needed.