Exclusive binary files
klausps at gmail.com
Sun Sep 2 07:51:29 PDT 2007
2007/9/2, Joerg Sonnenberger <joerg at britannica.bec.de>:
> On Sat, Sep 01, 2007 at 06:30:20PM -0400, Mike Meyer wrote:
> > On Sat, 1 Sep 2007 14:27:42 -0300 "Klaus Schneider" <klausps at gmail.com>
> > > Well, anybody know a way to make the FreeBSD run just binaries that I
> > > compiled?
> > In general, it's impossible. There's no way the system can know that
> > you compiled a binary. There are a number of things you could do with
> > a custom kernel and toolchain to indicate that you compiled the binary
> > (like Peter's changing of ELF OSABI), but that's just security through
> > obscurity. If someone figures out those changes and replicates them,
> > you lose.
> You mean using cryptographic hashes to ensure that binaries match those
> you compiled is impossible? Something like NetBSD's veriexec?
> freebsd-hackers at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
Yes. The alternative would be somethink like veriexec, using hashes into elf
* Klaus Schneider
More information about the freebsd-hackers