lkml.org 
[lkml]   [1999]   [Dec]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: malware defense
Date
From
> On Fri, 3 Dec 1999, Jeffrey B. Siegal wrote:
>
> > > How do you protect against corruption/replacement of the daemon software
> > > that checks the images?
> >
> > Keep it in physically unwritable media, like a CD-R in a CD-ROM drive.
>
> How will it help if trojan already modified the kernel image?

Or if the compiler you used was unsafe, or the compiler that built that
compiler or..

Mr Turning says "you lose" 8)

More seriously I know of at least one bunch of people who not
only audited Linux by hand, and each app they wanted but also audited gcc,
and binutils built their trusted gcc with their own in house cc/libs and built
everything with their trusted compiler set.

Alan



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.043 / U:0.368 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site