From owner-freebsd-hackers@FreeBSD.ORG  Sun Sep  2 11:50:30 2007
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5271016A417
	for <freebsd-hackers@freebsd.org>; Sun,  2 Sep 2007 11:50:30 +0000 (UTC)
	(envelope-from joerg@britannica.bec.de)
Received: from www.pkgsrc-box.org (www.ostsee-abc.de [62.206.222.50])
	by mx1.freebsd.org (Postfix) with ESMTP id 15AFA13C48E
	for <freebsd-hackers@freebsd.org>; Sun,  2 Sep 2007 11:50:30 +0000 (UTC)
	(envelope-from joerg@britannica.bec.de)
Received: from britannica.bec.de (www.pkgsrc-box.org [127.0.0.1])
	by www.pkgsrc-box.org (Postfix) with ESMTP id E992DE7A41D
	for <freebsd-hackers@freebsd.org>; Sun,  2 Sep 2007 10:45:08 +0000 (UTC)
Received: by britannica.bec.de (Postfix, from userid 1000)
	id 49F87534F; Sun,  2 Sep 2007 12:45:09 +0200 (CEST)
Date: Sun, 2 Sep 2007 12:45:09 +0200
From: Joerg Sonnenberger <joerg@britannica.bec.de>
To: freebsd-hackers@freebsd.org
Message-ID: <20070902104508.GB19678@britannica.bec.de>
Mail-Followup-To: freebsd-hackers@freebsd.org
References: <45910cf20709011027o546363e2h4f5646b15e0f84a2@mail.gmail.com>
	<20070901183020.6a098955@bhuda.mired.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20070901183020.6a098955@bhuda.mired.org>
User-Agent: Mutt/1.5.16 (2007-06-09)
Subject: Re: Exclusive binary files
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 02 Sep 2007 11:50:30 -0000

On Sat, Sep 01, 2007 at 06:30:20PM -0400, Mike Meyer wrote:
> On Sat, 1 Sep 2007 14:27:42 -0300 "Klaus Schneider" <klausps@gmail.com> wrote:
> > Well, anybody know a way to make the FreeBSD run just binaries that I have
> > compiled?
> 
> In general, it's impossible. There's no way the system can know that
> you compiled a binary. There are a number of things you could do with
> a custom kernel and toolchain to indicate that you compiled the binary
> (like Peter's changing of ELF OSABI), but that's just security through
> obscurity. If someone figures out those changes and replicates them,
> you lose.

You mean using cryptographic hashes to ensure that binaries match those
you compiled is impossible? Something like NetBSD's veriexec?

Joerg