Messages in this thread | | | Date | Tue, 15 Jan 2013 23:27:12 +0100 | Subject | Re: [PATCH 0/3] ELF executable signing and verification | From | richard -rw- weinberger <> |
| |
On Tue, Jan 15, 2013 at 10:34 PM, Vivek Goyal <vgoyal@redhat.com> wrote: > Upon exec(), we determine if executable is signed. If it is, then locks > down the pages in memory (using MAP_LOCKED) and verfies the signature. > If signature does not match, process is killed. Unsigned processes > don't get affected at all.
Also ptrace() should be disallowed on such a process created from a signed ELF.
-- Thanks, //richard
| |