-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wednesday, 2012-06-27 at 02:24 -0400, Brian K. White wrote: ...
Suppose I have a compromised, or merely buggy, system and I power it off ungracefully. I then boot up the install media, either to install on some other partition or to use directly as a live media, either way my whole purpose of shutting off the power was to prevent the hacker/virus/rootkit/etc from getting a chance to clean up after itself, or to catch some other process in mid-act, I _need_ that swap image untouched. I want to read/copy/analyze it using the install media or the new system installed to some other partition.
Then you can not use the install media, because it is designed for installation, not for forensics. Diferent requirements, different design parameters. The install media autodetects swap and uses it, and that's a known feature: a live needs memory, and installation can fail if not enough memory is available: thus add swap. - -- Cheers, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iEYEARECAAYFAk/q/8EACgkQtTMYHG2NR9X5xwCbBBvJb/EUFDkIUICUlB9eMGxn JZoAn0UGLwmlKdDnYQEuX2RDgBgai5ks =c1IF -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org