40 ms·
How does that actually work? I'm tempted to think it's down to one person who validates that two signatures are present.
by superuser2 10y ago
How does that actually work? I'm tempted to think it's down to one person who validates that two signatures are present.
- compsciphd 10y agoI think the LISA paper does a good job describing an approach. basically don't allow people to commit changes directly to the underlying system, require the changes from 2 administrators to be captured and then compare them for equivalence. (what equivalence means can be bit for bit equality at the most basic binary level, or perhaps some parsing that can verify equivalence at language level for configurations) if the changes are equivalent commit them. otherwise point out the differences. As the paper also discusses, can be used with a single administrator to make the administration auditable, simply capture all changes before they are committed.