Messages in this thread |  | | Date | Thu, 17 Jan 2013 12:25:37 -0500 | From | Vivek Goyal <> | Subject | Re: [PATCH 0/3] ELF executable signing and verification |
| |
On Thu, Jan 17, 2013 at 06:22:47PM +0200, Kasatkin, Dmitry wrote:
[..] > > Currently it is expected to use these patches only for statically linked > > executables. No dynamic linking. In fact patches specifically disable > > calling interpreter. This does not prevent against somebody using dlopen() > > sutff. So don't sign binaries which do that. > > How dynamic linking and interpreter are related together?
Well interpreter will do the dynamic linking automatically? So I blocked that.
> > This is rather policy than enforcement. > Protection works only for statically linked binaries, because dynamic > libraries are not verified.
Agreed.
Thanks Vivek
|  |