Messages in this thread |  | | Subject | Re: [PATCH 2/3] binfmt_elf: Verify signature of signed elf binary | From | Mimi Zohar <> | Date | Sun, 20 Jan 2013 11:55:17 -0500 |
| |
On Sun, 2013-01-20 at 08:17 -0800, H. Peter Anvin wrote: > You then get into issues like: do we have to ban prelink as a result?
Once you change a file, the original signature shouldn't match. If you really trust prelink, then make prelink a trusted application that can resign the modified file. How to create/store/use private keys on the target system is a separate issue.
thanks,
Mimi
|  |