Messages in this thread | | | Date | Tue, 15 Jan 2013 18:15:30 -0500 | From | Vivek Goyal <> | Subject | Re: [PATCH 0/3] ELF executable signing and verification |
| |
On Tue, Jan 15, 2013 at 11:27:12PM +0100, richard -rw- weinberger wrote: > On Tue, Jan 15, 2013 at 10:34 PM, Vivek Goyal <vgoyal@redhat.com> wrote: > > Upon exec(), we determine if executable is signed. If it is, then locks > > down the pages in memory (using MAP_LOCKED) and verfies the signature. > > If signature does not match, process is killed. Unsigned processes > > don't get affected at all. > > Also ptrace() should be disallowed on such a process created from a signed ELF.
Yes, that I have listed in TODO. We need to disable ptrace for signed processes or make sure only signed process can trace it.
Thanks Vivek
| |