Date: Wed, 8 May 2002 17:16:35 +0200 From: Miguel Mendez <flynn@energyhq.homeip.net> To: hackers@freebsd.org Subject: extra sanity check in modules Message-ID: <20020508171635.A50078@energyhq.homeip.net>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Hi,
I've been thinking of adding an extra check in kldload. My idea is to have
an md5 sum per module, so for foo.ko we'd have foo.ko.md5. At load time
the md5 is checked, if it doesn't test ok the module is not loaded. The
md5 files could chflagged as inmutable for extra security. Is it worth
having this or just a silly idea? I might start hacking on my DP1 box on
this thing later.
Cheers,
--
Miguel Mendez - flynn@energyhq.homeip.net
GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt
EnergyHQ :: http://www.energyhq.tk
FreeBSD - The power to serve!
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)
iD8DBQE82UFTnLctrNyFFPERAtFcAJ9w+GLXGVItLLZEr/UgqlUzjyLa2QCfUPLS
I8sHUTm3E8BS4W2Mix4JV+E=
=Ynpt
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020508171635.A50078>