One quick user beware: Tiny Core is not a turn-key operating system...
Downloaded programs WILL have an md5 file...
Core is NOT a secure system. All security must be added by the user...
Once an outsider gains access, no program can be trusted. All the features you think would add security could be faked...
If you suspect an intrusion occurred, you would need to boot from a secured thumbdrive and verify the checksums on your persistent storage. Once verified, you could then do your normal boot.
Thanks for the response, it's been enlightening. TinyCore is not turn-key, that is obvious although not a valid argument. For example, out of the box TinyCore provides a control panel and GUI tools for trival matters, such as mounting partitions and changing desktop backgrounds. To shoot down a user concern and/or feature request based on this argument is unfair.
By design TC has features that help make it reasonably secure (no automounts, read-only file system, minimal background services, set password, encrypted backup, etc). And with minimal effort it's not hard to make TC about as secure as any other distribution (iptables, custom software compiles, shutdown without backup, etc).
Since the kernel and primary file system are read-only and the user is in complete control of what gets loaded and backed up/when, then the remaining item is to protect the integrity of the extensions. Thank-you for the sums on separate storage tip, that will be useful.
As there appears to be some confusion, just to be clear this is my concern and feature request
. When Apps completes the md5 check and reports 'Md5 checking complete' is also checks and lists the extensions that could not be verified due to a missing md5.txt file. No actual system changes, just reporting. The feature would even be useful to developers, a quick reminder of outstanding md5 files that need to be created prior to submission.
Md5 checking complete.
The following extensions could not be verified due to missing md5.txt files:
No reply required. I've tried to provide feedback on this and previous RCs on several items and my experience has been that in most instances the feedback is quickly pooh-poohed or ignored altogether. When a suggestion is heard, it typically takes numerous responses and lively discussions
to justify the request. Apparently TC does not require much refinement and i am probably just wasting everyone's time. I will likely just continue to utilize TC as a regular user. Thanks.