replace uname -a informational string

O. Hartmann ohartman at zedat.fu-berlin.de
Fri Oct 23 20:54:32 UTC 2015


Am Fri, 23 Oct 2015 13:45:25 -0400
"Michael B. Eichorn" <ike at michaeleichorn.com> schrieb:


First of all: Thank you very much for your concerns and answers.

> On Fri, 2015-10-23 at 09:08 +0200, O. Hartmann wrote:
> > For security purposes, I need to replace the informations given by
> > "uname -a"
> > to hode the kernel build system, name et cetera.  
> 
> I presume you intendend 'hide' here?
> 
> If you want to scrub a binaries of _all_ information about the building
> system this is a problem Debian is actively working on called
> 'reproducible builds' but is not possible today.
> 
> https://reproducible.debian.net
> 
> If you want to hide the hostname, why not just build with a different
> hostname set?

Because it is not only the hostname, uname reveals the target host, date and OS version.

In our case, the image ist built on a dedicated host for a security appliabce based on
NanoBSD and I'd like to hide the OS type, the OS name, the build box' name and the build
date. 

> 
> > 
> > Is there a way to achieve this via setting some knobs in the process of
> > a
> > buildkernel?
> > 
> > Please CC me, I'm not subscriber of the list.
> > 
> > Kind regards and thanks in advance,
> > 
> > O. Hartmann  


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20151023/746f430e/attachment.bin>


More information about the freebsd-questions mailing list