23 reputation
3
bio website
location Hong Kong, Hong Kong
age
visits member for 2 years
seen Jul 27 at 10:29

Chief Architect


Jul
30
comment Strategies for signing sections of a text file to prevent tampering
Thanks D.W. I think I will have to build an inclusion policy which gets pulled in and checks for which files are expected and is managed by an overall admin as well as social engineering.
Jul
29
comment Strategies for signing sections of a text file to prevent tampering
I'm allowing people to define an infrastructure set up - using chef or some other text based DSL, which they can then save in version control and share with others. E.g. it might be a cookbook for a common continuous integration setup. But in a corporate scenario there may be aspects which are mandated - e.g. to use a specific OS, include certain libraries, or other security aspects - which we want to force inclusion - but keeping the rest of the file open for modification. Probably splitting the required parts up is the most sensible way - with external logic to always pull that in.