Putting a whole linux server under source control (git)

Posted by Tobias Hertkorn on Server Fault See other posts from Server Fault or by Tobias Hertkorn
Published on 2011-03-17T15:40:10Z Indexed on 2011/03/17 16:11 UTC
Read the original article Hit count: 215

Filed under:
|
|
|

I am thinking about putting my whole linux server under version control using git. The reason behind it being that that might be the easiest way to detect malicious modifications/rootkits. All I would naively think is necessary to check the integrity of the system: Mount the linux partition every week or so using a rescue system, check if the git repository is still untempered and then issue a git status to detect any changes made to the system.

Apart from the obvious waste in disk space, are there any other negative side-effects?

Is it a totally crazy idea?

Is it even a secure way to check against rootkits since I most likely would have to at least exclude /dev and /proc ?

© Server Fault or respective owner

Related posts about linux

Related posts about security