LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-16-2004, 09:49 AM   #1
robby737
Member
 
Registered: May 2004
Distribution: mandrake
Posts: 66

Rep: Reputation: 15
Safety of 3rd party cd's


First let me state that I am less qualified than a noob.....I purchased some 3rd party Linux 10 CD's from a web site listed on this forum and a question came to mind. Can a person take a clean, lets say mandrake 10 linux operating system pack add a root kit, load it to CD and then sell it as 3rd party software. If so how would a noob such as myself know. I want to be sure that I am not installing a built in root kit from the start.
 
Old 06-16-2004, 09:57 AM   #2
2damncommon
Senior Member
 
Registered: Feb 2003
Location: Calif, USA
Distribution: PCLINUXOS
Posts: 2,918

Rep: Reputation: 103Reputation: 103
Quote:
Can a person take a clean, lets say mandrake 10 linux operating system pack add a root kit, load it to CD and then sell it as 3rd party software. If so how would a noob such as myself know.
Never use any software from an untrusted source.
I think comparing md5sums would be a check if needed.
The reputable distributors of cheap linux CDs are not going to be doing this.
 
Old 06-16-2004, 10:25 AM   #3
robby737
Member
 
Registered: May 2004
Distribution: mandrake
Posts: 66

Original Poster
Rep: Reputation: 15
Well I dont know how one would know whom to trust when it comes to 3rd party software. If allowed to ask, do you think that linuxcd.org would be one of those?
 
Old 06-16-2004, 10:27 AM   #4
robby737
Member
 
Registered: May 2004
Distribution: mandrake
Posts: 66

Original Poster
Rep: Reputation: 15
Oh yeah, I am a noob and dont have a clue what md5sums is/are. Could you explain how to check that
 
Old 06-16-2004, 10:31 AM   #5
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
How to Verify an Iso Image - www.linuxiso.org supplies me with most of my images for burning and they also have pretty good instructions on verifying and burning the image.

Bearing in mind the nature of the internet, if that store did put a rootkit into a distribution cd, they would be found out very very quickly and they would be slated all across the internet. The fact that this has not happened would suggest to me that they are trustworthy. Just a thought.

Last edited by XavierP; 06-16-2004 at 10:37 AM.
 
Old 06-16-2004, 11:04 AM   #6
robby737
Member
 
Registered: May 2004
Distribution: mandrake
Posts: 66

Original Poster
Rep: Reputation: 15
You are probably right....Thanks for the help
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Assessing 3rd-party packages dhave Slackware 2 07-21-2005 06:22 AM
how to install 3rd party .deb SlipAway172 Ubuntu 1 05-12-2005 09:53 PM
3rd party kernel sources on gentoo JediMasterTux Linux - Distributions 2 04-04-2005 07:25 AM
3rd party Mandrake DVDs? jenna_h Mandriva 2 06-10-2004 08:27 PM
MS blocks 3rd party MSN Clients. toti Linux - Software 16 10-16-2003 01:34 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration