Proposal for a design for signed kernel/modules/etc

2017-03-27 Thread Eric McCorkle
Hello everyone, The following is a design proposal for signed kernel and kernel module loading, both at boot- and runtime (with the possibility open for signed executables and libraries if someone wanted to go that route). I'm interested in feedback on the idea before I start actually writing cod

Re: Proposal for a design for signed kernel/modules/etc

2017-03-27 Thread Shawn Webb
Hey Eric, Thank you for writing this! ELF binary signing has been on my ever-growing list of things to research and develop. If you'd like help, please let me know. I have a few comments, which I've made inline. On Mon, Mar 27, 2017 at 01:54:44PM -0400, Eric McCorkle wrote: > Hello everyone, >

Re: Proposal for a design for signed kernel/modules/etc

2017-03-27 Thread Eric McCorkle
On 03/27/2017 14:37, Shawn Webb wrote: > Hey Eric, > > Thank you for writing this! ELF binary signing has been on my > ever-growing list of things to research and develop. If you'd like help, > please let me know. I'll probably spin up a branch on my github in the near future. > As git has shown