Re: Exclusive binary files

2007/9/2, Joerg Sonnenberger <[e-mail]>:
>
> On Sat, Sep 01, 2007 at 06:30:20PM -0400, Mike Meyer wrote:
> > On Sat, 1 Sep 2007 14:27:42 -0300 "Klaus Schneider" <[e-mail]>
> wrote:
> > > Well, anybody know a way to make the FreeBSD run just binaries that I
> have
> > > compiled?
> >
> > In general, it's impossible. There's no way the system can know that
> > you compiled a binary. There are a number of things you could do with
> > a custom kernel and toolchain to indicate that you compiled the binary
> > (like Peter's changing of ELF OSABI), but that's just security through
> > obscurity. If someone figures out those changes and replicates them,
> > you lose.
>
> You mean using cryptographic hashes to ensure that binaries match those
> you compiled is impossible? Something like NetBSD's veriexec?
>
> Joerg
> _______________________________________________
> [e-mail] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "[e-mail]"
>

Yes. The alternative would be somethink like veriexec, using hashes into elf
binaries...

-- 
/*
* Klaus Schneider
*/
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[e-mail]"