Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Nov 1996 08:19:07 -0600
From:      Chris Csanady <ccsanady@friley216.res.iastate.edu>
To:        Rob Simons <rob@xs1.simplex.nl>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Q: system specific binaries 
Message-ID:  <199611151419.IAA10102@friley216.res.iastate.edu>
In-Reply-To: Your message of Fri, 15 Nov 1996 14:29:19 %2B0100. <199611151329.OAA00724@xs1.simplex.nl> 

next in thread | previous in thread | raw e-mail | index | archive | help

>
>Hi,
>
>Does anyone have any experience with customising FreeBSD so that only
>binaries which are compiled on a system itself will actually run on
>that system ?
>So the local compiler has to give a key to each binary when it's 
>compiled, and when executed there'd be a check for that key. ?
>That way only people who have access to the compiler may generate 
>binaries, and no 'foreign' binaries will be executed by the syetem.
>
>If this is too easy to break, is there perhaps a way to specify
>from which directories binaries may be executed ?

there is the noexec mount option.  man mount

Chris Csanady

>
>- Rob.
>
>/*--------------------------------------------------------------*\
>/*   Rob Simons                      |  rob@simplex.nl          *\
>/*   ------------  |  -------------  |  --------  |  -------    *\
>/*   Novell Netware System Operator  |  UNIX system operator    *\
>/*--------------------------------------------------------------*\






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611151419.IAA10102>