Re: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries

On Tue, 25 Apr 2006, Arjan van de Ven prattled cheerily:
On Tue, 2006-04-25 at 00:35 +0100, Nix wrote:
On Mon, 24 Apr 2006, Arjan van de Ven yowled:
On Mon, 2006-04-24 at 21:32 +0100, Nix wrote:
It checks mmap and mprotect with PROT_EXEC, and execve().

so no jvm's or flash plugins.

Well, you'll have to sign the flash plugin. This isn't
sign-at-compilation-time;

the point I made is that a jvm has executable memory capabilities (it
has to) and can be made an elf loader. At which point.. game over.

Yeah, you'd have to avoid allowing hostile ELF loaders to execute, but
even they are impeded somewhat: they can't use PROT_EXEC mappings but
have to e.g. use an executable stack hack.

To mix a metaphor badly, it raises the bar; it doesn't burn down the
gym.

so it's not all that easy as you make it sound

Everyone seems to want the One Security Fix To Rule Them All.

I'm not part of that "everyone". I'm all in favor of removing degrees of
freedom. However this one doesn't, it's just pure fake. This is similar
to posting a sign at your unlocked front door "please don't burgle me
via my front door" while your windows are also open.

The JVM example is a bit nasty, I'll admit. (Of course I'm safe because
my stripped-down firewall only includes one interpreter, perl, and
that's executable by root only. ;) )

--
`On a scale of 1-10, X's "brokenness rating" is 1.1, but that's only
because bringing Windows into the picture rescaled "brokenness" by
a factor of 10.' --- Peter da Silva
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Windows permissions was Re: Its COBOL, Jim, but not as we know it...
    ... Windows is highly configurable; the fact that people ignore this and run ... One of the problems is also figuring out what security features ... Microsoft email can automatically execute an attachment. ... Here's a transcript from a Linux forum 4 years ago where at least one user ...
    (comp.lang.cobol)
  • Re: Its COBOL, Jim, but not as we know it...
    ... Windows is highly configurable; the fact that people ignore this and run ... It is _you_ that has improved the security, ... Microsoft email can automatically execute an attachment. ... Here's a transcript from a Linux forum 4 years ago where at least one user ...
    (comp.lang.cobol)
  • Re: [opensuse] Who said Linux doesnot get Virus infections
    ... you can execute a screen saver if you test it. ... They're under the general "viruses" tag. ... A Linux system being used to protect Windows ...
    (SuSE)
  • Re: ?? Windows Registry corrupted
    ... Enquire, plan and execute ... including System Restore. ... This PC was running Windows XP Pro. ... It appeared as if it would repair the operating system, ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Trusting and testing unknown (or unfamiliar) executables
    ... Finally you mention completely bypassing the windows kernel by using ... assembler instructions at ring zero... ... > including any file deletion or modification, and any attempt to execute ... > Ring0 assembly code which bypasses the usual Windows protection traps. ...
    (alt.comp.lang.borland-delphi)