看板 FB_security 關於我們 聯絡資訊
On Tue, 25 Oct 2005, M. Warner Losh wrote: > In message: <20051024064605.A44523@cons.org> > Martin Cracauer <cracauer@cons.org> writes: > : ELF object files are timestamped. But there's some elf-cmp out there. > > Elf .o's are timestampped, Script started on Thu Oct 27 15:17:31 2005 ttyv2:bde@epsplex:/tmp/z> echo "int i = 1;" >z.c ttyv2:bde@epsplex:/tmp/z> cc -c z.c ttyv2:bde@epsplex:/tmp/z> mv z.o z.o~ ttyv2:bde@epsplex:/tmp/z> cc -c z.c ttyv2:bde@epsplex:/tmp/z> md5 z.o~ z.o MD5 (z.o~) = c92e2bbb5a0e8b4f05eced238762dde1 MD5 (z.o) = c92e2bbb5a0e8b4f05eced238762dde1 ttyv2:bde@epsplex:/tmp/z> cmp z.o~ z.o ttyv2:bde@epsplex:/tmp/z> exit Script done on Thu Oct 27 15:18:14 2005 > but Elf executables are 100% reproducible, > except when people go out of their way to not make them so. Like > adding the date or person builder. True. Bruce _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"