Exclusive binary files

[Klaus Schneider]

2007/9/2, Joerg Sonnenberger <joerg at britannica.bec.de>:
>
> On Sat, Sep 01, 2007 at 06:30:20PM -0400, Mike Meyer wrote:
> > On Sat, 1 Sep 2007 14:27:42 -0300 "Klaus Schneider" <klausps at gmail.com>
> wrote:
> > > Well, anybody know a way to make the FreeBSD run just binaries that I
> have
> > > compiled?
> >
> > In general, it's impossible. There's no way the system can know that
> > you compiled a binary. There are a number of things you could do with
> > a custom kernel and toolchain to indicate that you compiled the binary
> > (like Peter's changing of ELF OSABI), but that's just security through
> > obscurity. If someone figures out those changes and replicates them,
> > you lose.
>
> You mean using cryptographic hashes to ensure that binaries match those
> you compiled is impossible? Something like NetBSD's veriexec?
>
> Joerg
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
>

Yes. The alternative would be somethink like veriexec, using hashes into elf
binaries...

-- 
/*
* Klaus Schneider
*/