Messages in this thread | | | Subject | Re: [PATCH 2/3] binfmt_elf: Verify signature of signed elf binary | From | Mimi Zohar <> | Date | Wed, 16 Jan 2013 17:35:23 -0500 |
| |
On Tue, 2013-01-15 at 16:34 -0500, Vivek Goyal wrote: > If a binary is signed, verify its signature. If signature is not valid, do > not allow execution. If binary is not signed, execution is allowed > unconditionally.
Basically you're building the policy into the executable. Anyone can rebuild the executable and, without signing it, install/replace an existing one. How is this safe? The signature verification policy needs to be defined independently of the executable.
Mimi
| |