Re: Writes to mounted devices containing file-systems.

[H. Peter Anvin]

Followup to:  <[e-mail]>
By author:    "Richard B. Johnson" <[e-mail]>
In newsgroup: linux.dev.kernel
> 
> In this company, they hired a "CIO" who thinks that no computers
> should have any local storage or boot capability. They must all
> boot from some secure (M$) file-server. They will not be allowed
> to have local disks and, horrors -- of course no floppy drives or
> CD-ROMS.
> 

This is actually a lot easier to do in Linux (using PXELINUX and
NFSroot) -- M$ thinks of this as a threat to their licensing
(fleecing) model.

Seriously, you should use this as an inroad -- central control setups
is something Unix absolutely excels at, and Windows does hideously
poorly.

> He doesn't care that we are in the business of making software-driven
> machines so we require access to the guts of computers and their
> operating systems.

Test machines obviously can't be done this way, but they shouldn't
contain important data.  (And don't expect great performance, either,
although with modern file servers and networks it can be better than
you'd think.)

> The next one will be:
> 
> 	"Linux is insecure..."

Consider SirCam and Code Red an "education campaign" for the
clueless.

	-hpa
-- 
<[e-mail]> at work, <[e-mail]> in private!
"Unix gives you enough rope to shoot yourself in the foot."
http://www.zytor.com/~hpa/puzzle.txt	<[e-mail]>