lkml.org 
[lkml]   [2006]   [Apr]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries
    On Tue, 25 Apr 2006, Arjan van de Ven wrote:
    > On Tue, 2006-04-25 at 00:35 +0100, Nix wrote:
    > > On Mon, 24 Apr 2006, Arjan van de Ven yowled:
    > > > On Mon, 2006-04-24 at 21:32 +0100, Nix wrote:
    > > >> It checks mmap and mprotect with PROT_EXEC, and execve().
    > > >
    > > > so no jvm's or flash plugins.
    > >
    > > Well, you'll have to sign the flash plugin. This isn't
    > > sign-at-compilation-time;
    >
    > the point I made is that a jvm has executable memory capabilities (it
    > has to) and can be made an elf loader. At which point.. game over.

    Then don't sign the jvm ;-)

    Gr{oetje,eeting}s,

    Geert

    --
    Geert Uytterhoeven -- There's lots of Linux beyond ia32 -- geert@linux-m68k.org

    In personal conversations with technical people, I call myself a hacker. But
    when I'm talking to journalists I just say "programmer" or something like that.
    -- Linus Torvalds
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-04-25 15:03    [W:2.339 / U:0.284 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site