View Single Post
  #6   (View Single Post)  
Old 15th July 2011
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 3,318
Default

Quote:
Originally Posted by jggimi View Post
The ramdisk kernel (bsd.rd) functions without mounting any physical drives. This is why it's called the "ramdisk kernel". Using it, an admin can reinstall or upgrade, including an upgrade-in-place of the installed system, which replaces boot blocks, kernels, and userland libraries and executables (/bin, /sbin, /usr/bin, /usr/lib, /usr/sbin, /usr/libexec, and I'm sure a few other structures I've forgotten).
Also of note is /usr/mdec/mbr which is a copy of the master boot record constructed at installation. If you have concerns about the presence of boot sector infection, you can always diff(1) the boot sector against this file.

CyberJet, you will find useful information in the boot_i386(8) manpage, & Section 14.7 of the FAQ.

Last edited by ocicat; 16th July 2011 at 12:27 AM.
Reply With Quote