Re: SHC bash script compiler for Linux on z
Mark, The difference between Freeware and Open Source is critical and has to do with the overloading of the word "free". One is an economic issue the other an issue of liberty. Get back to me if this is not clear. Regards, Flint On Wed, 8 Feb 2017, Mark Post wrote: Date: Wed, 8 Feb 2017 14:47:47 -0700 From: Mark Post <mp...@suse.com> Reply-To: Linux on 390 Port <LINUX-390@VM.MARIST.EDU> To: LINUX-390@VM.MARIST.EDU Subject: Re: SHC bash script compiler for Linux on z On 2/8/2017 at 04:26 PM, Paul Flint <fl...@flint.com> wrote: A comfort to know that it is not Freeware... It shouldn't be. Neither "open source" nor "freeware" by themselves are any indication of quality. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ Kindest Regards, ☮ Paul Flint (802) 479-2360 Home (802) 595-9365 Cell / Based upon email reliability concerns, please send an acknowledgement in response to this note. Paul Flint 17 Averill Street Barre, VT 05641 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Itschak, I completely agree with your reasons! I am giving a presentation on bash in June at the VM Workshop in Cleveland. Regards, Paul Flint On Thu, 9 Feb 2017, Itschak Mugzach wrote: Date: Thu, 9 Feb 2017 00:04:10 +0200 From: Itschak Mugzach <imugz...@gmail.com> Reply-To: Linux on 390 Port <LINUX-390@VM.MARIST.EDU> To: LINUX-390@VM.MARIST.EDU Subject: Re: SHC bash script compiler for Linux on z The reason I choose bash was that you nothing to install, so it will run on any standard Linux. Not sure about the assemblers and I was a bit joking. C looks an equal solution. ITschak נשלח מה-iPad שלי ב-8 בפבר׳ 2017, בשעה 23:54, Mark Post <mp...@suse.com> כתב/ה: On 2/8/2017 at 04:21 PM, Itschak Mugzach <imugz...@gmail.com> wrote: I accept that. does SLES supports Assembler 390 ;-) If it should be C, C it will be. Not really, since there isn't an open source package to do that. The GNU Compiler Colllection (gcc) does contain an assembler, as. The syntax is not the same as what you're used to, so it doesn't really count. Dave Rivers has already posted about his company's supported product. There is also a no-cost assembler from Tachyon Software, http://www.tachyonsoft.com/legacy.html I don't know how that compares to Dignus' product, but the price is certainly attractive. Tachyon also offers a for-fee product at http://www.tachyonsoft.com/txaover.html I have no experience with any of these products, so I can't offer any advice on them. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ Kindest Regards, ☮ Paul Flint (802) 479-2360 Home (802) 595-9365 Cell / Based upon email reliability concerns, please send an acknowledgement in response to this note. Paul Flint 17 Averill Street Barre, VT 05641 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
The reason I choose bash was that you nothing to install, so it will run on any standard Linux. Not sure about the assemblers and I was a bit joking. C looks an equal solution. ITschak נשלח מה-iPad שלי ב-8 בפבר׳ 2017, בשעה 23:54, Mark Post כתב/ה: On 2/8/2017 at 04:21 PM, Itschak Mugzach wrote: >> I accept that. does SLES supports Assembler 390 ;-) If it should be C, C it >> will be. > > Not really, since there isn't an open source package to do that. The GNU > Compiler Colllection (gcc) does contain an assembler, as. The syntax is not > the same as what you're used to, so it doesn't really count. > > Dave Rivers has already posted about his company's supported product. There > is also a no-cost assembler from Tachyon Software, > http://www.tachyonsoft.com/legacy.html I don't know how that compares to > Dignus' product, but the price is certainly attractive. Tachyon also offers > a for-fee product at http://www.tachyonsoft.com/txaover.html > > I have no experience with any of these products, so I can't offer any advice > on them. > > > Mark Post > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
>>> On 2/8/2017 at 04:26 PM, Paul Flintwrote: > A comfort to know that it is not Freeware... It shouldn't be. Neither "open source" nor "freeware" by themselves are any indication of quality. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
> > I accept that. does SLES supports Assembler 390 ;-) If it should be C, C it > will be. > > Thanks. > ITschak > Yes - you can use our assembler to write HLASM-style programs on s390x SLES. - Dave Rivers - -- riv...@dignus.comWork: (919) 676-0847 Get your mainframe programming tools at http://www.dignus.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Mark, A comfort to know that it is not Freeware... Regards, Paul On Wed, 8 Feb 2017, Mark Post wrote: Date: Wed, 8 Feb 2017 14:13:21 -0700 From: Mark Post <mp...@suse.com> Reply-To: Linux on 390 Port <LINUX-390@VM.MARIST.EDU> To: LINUX-390@VM.MARIST.EDU Subject: Re: SHC bash script compiler for Linux on z On 2/8/2017 at 04:01 PM, Paul Flint <fl...@flint.com> wrote: Just to be clear, this code is not Open Source but Freeware. You have that 100% backward. The shc package is open source since it is licensed under an OSI approved license: GNU GPL V3. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ Kindest Regards, ☮ Paul Flint (802) 479-2360 Home (802) 595-9365 Cell / Based upon email reliability concerns, please send an acknowledgement in response to this note. Paul Flint 17 Averill Street Barre, VT 05641 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
I accept that. does SLES supports Assembler 390 ;-) If it should be C, C it will be. Thanks. ITschak On Wed, Feb 8, 2017 at 11:15 PM, Mark Postwrote: > >>> On 2/8/2017 at 03:42 PM, Itschak Mugzach wrote: > > Hi Mark. > > > > my intent is to hide the code. I believe that most people wont invest > time > > Perhaps not, but if you believe it to be worth protecting, do it right. > > > in trying to investigate it, but who knows. Any other laternative to > > protect bash code, or should I look into a different language? > > If you don't want people to examine your code, then you really need to use > a compiled language, such as C, COBOL, C++, FORTRAN, whatever. > > > Mark Post > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
>>> On 2/8/2017 at 03:42 PM, Itschak Mugzachwrote: > Hi Mark. > > my intent is to hide the code. I believe that most people wont invest time Perhaps not, but if you believe it to be worth protecting, do it right. > in trying to investigate it, but who knows. Any other laternative to > protect bash code, or should I look into a different language? If you don't want people to examine your code, then you really need to use a compiled language, such as C, COBOL, C++, FORTRAN, whatever. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
>>> On 2/8/2017 at 04:01 PM, Paul Flintwrote: > Just to be clear, this code is not Open Source but Freeware. You have that 100% backward. The shc package is open source since it is licensed under an OSI approved license: GNU GPL V3. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Well, there are many reasons why to hide the code from others. my reason is that the code will run on other people's servers and I don't want them to look into. it include how I do what I do, certificates, etc. file system protection is not sufficient if I can't control it. ITschak On Wed, Feb 8, 2017 at 11:07 PM, John McKownwrote: > On Wed, Feb 8, 2017 at 3:00 PM, Paul Flint wrote: > > > Greetings Itschak, > > > > You could protect your bash source by the Unix permissions... > > > > I know it sound niaf, in this day and age with everyone havin root, but > > thought it worth mentioning. > > > > Can you run a BASH script which you cannot also read? I was under the > impression that was the desire. To "protect" the script from being > inspected. I don't really know why, perhaps an embedded password? > > > > > > > Regards, > > > > Paul > > > > On Wed, 8 Feb 2017, Itschak naive wrote: > > > > > >> > > -- > Our calculus classes are an integral part of your education. > > Maranatha! <>< > John McKown > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Paul, the script may run on other people's server which I do not have control over. ITschak On Wed, Feb 8, 2017 at 11:00 PM, Paul Flint <fl...@flint.com> wrote: > Greetings Itschak, > > You could protect your bash source by the Unix permissions... > > I know it sound niaf, in this day and age with everyone havin root, but > thought it worth mentioning. > > Regards, > > Paul > > On Wed, 8 Feb 2017, Itschak naive wrote: > > Date: Wed, 8 Feb 2017 22:42:37 +0200 >> From: Itschak Mugzach <imugz...@gmail.com> >> Reply-To: i_mugz...@securiteam.co.il >> To: LINUX-390@VM.MARIST.EDU >> Subject: Re: SHC bash script compiler for Linux on z >> >> >> Hi Mark. >> >> my intent is to hide the code. I believe that most people wont invest time >> in trying to investigate it, but who knows. Any other laternative to >> protect bash code, or should I look into a different language? >> >> ITschak >> >> On Wed, Feb 8, 2017 at 10:27 PM, Mark Post <mp...@suse.com> wrote: >> >> On 2/8/2017 at 02:43 PM, Itschak Mugzach <imugz...@gmail.com> wrote: >>>>>> >>>>> I wonder if any of you tried this freeware. >>>> >>> >>> It's not freeware. It's licensed under the GNU GPL 3. Two extremely >>> different things. >>> >>> I was able to install it on >>>> Centos 7, but it seems that the makefile is not sutable for SUSE or SUSE >>>> for z.. Below is the make file. I replaced the CC with gcc but am not >>>> familier with the parms requires. >>>> >>> >>> I see various flavors of it in the openSUSE Build Service. Several of >>> them build packages for both openSUSE and SLES. >>> https://build.opensuse.org/search >>> >>> Looking at the description, I don't think it's going to do what you want. >>> It's not really a compiler, so there will be no performance boost from >>> using it. Since it encrypts and decrypts the original script and then >>> invokes it with the running system's version of the shell, it won't >>> provide >>> any real protection from people being able to look at and copy the >>> script. >>> (I would imagine anyone even remotely familiar with gdb would be able to >>> extract that with no problem.) >>> >>> What you want may be something entirely different, however, so it's up to >>> you. >>> >>> >>> Mark Post >>> >>> -- >>> For LINUX-390 subscribe / signoff / archive access instructions, >>> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or >>> visit >>> http://www.marist.edu/htbin/wlvindex?LINUX-390 >>> -- >>> For more information on Linux on System z, visit >>> http://wiki.linuxvm.org/ >>> >>> >> >> >> -- >> ITschak Mugzach >> *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated >> Security Readiness Reviews (SRR) **|* >> >> -- >> For LINUX-390 subscribe / signoff / archive access instructions, >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or >> visit >> http://www.marist.edu/htbin/wlvindex?LINUX-390 >> -- >> For more information on Linux on System z, visit >> http://wiki.linuxvm.org/ >> >> > Kindest Regards, > > > > ☮ Paul Flint > (802) 479-2360 Home > (802) 595-9365 Cell > > / > Based upon email reliability concerns, > please send an acknowledgement in response to this note. > > Paul Flint > 17 Averill Street > Barre, VT > 05641 > > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
On Wed, Feb 8, 2017 at 3:00 PM, Paul Flintwrote: > Greetings Itschak, > > You could protect your bash source by the Unix permissions... > > I know it sound niaf, in this day and age with everyone havin root, but > thought it worth mentioning. > Can you run a BASH script which you cannot also read? I was under the impression that was the desire. To "protect" the script from being inspected. I don't really know why, perhaps an embedded password? > > Regards, > > Paul > > On Wed, 8 Feb 2017, Itschak naive wrote: > > >> -- Our calculus classes are an integral part of your education. Maranatha! <>< John McKown -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Greetings Itschak, Just to be clear, this code is not Open Source but Freeware. FWIW I would not install freeware. Regards, Flint On Wed, 8 Feb 2017, Itschak Mugzach wrote: Date: Wed, 8 Feb 2017 21:43:44 +0200 From: Itschak MugzachReply-To: i_mugz...@securiteam.co.il To: LINUX-390@VM.MARIST.EDU Subject: SHC bash script compiler for Linux on z I wonder if any of you tried this freeware. I was able to install it on Centos 7, but it seems that the makefile is not sutable for SUSE or SUSE for z.. Below is the make file. I replaced the CC with gcc but am not familier with the parms requires. # Makefile # INSTALL_PATH = /usr/local # For SCO CFLAGS = -b elf -O -D_SVID # For IRIX CFLAGS = -xansi -fullwarn -O3 -g0 # For Solaris CFLAGS = -fast -xO4 -s -v -Xa # For HPUX CFLAGS = -Wall -O -Ae # For OSF1 CFLAGS = -w -verbose -fast -std1 -g0 # For GNU C compiler CFLAGS = -Wall -O6 # -pedantic SHELL = /bin/sh all: shc ask_for_test shc: shc.c $(cc) $(CFLAGS) $@.c -o $@ ask_for_test: @echo '*** ¿Do you want to probe shc with a test script?' @echo '*** Please try... make test' test: make_the_test ask_for_strings make_the_test: match.x @echo '*** Running a compiled test script!' @echo '*** It must show files with substring "sh" in your PATH...' ./match.x sh match.x: shc match @echo '*** Compiling script "match"' CFLAGS="$(CFLAGS)" ./shc -v -f match ask_for_strings: @echo '*** ¿Do you want to see strings in the generated binary?' @echo '*** Please try... make strings' strings: make_the_strings ask_for_expiration make_the_strings: match.x @echo '*** Running: "strings -n 5 'match.x'"' @echo '*** It must show no sensible information...' strings -n 5 match.x ask_for_expiration: @echo '*** ¿Do you want to probe expiration date?' @echo '*** Please try... make expiration' expiration: til_yesterday ask_for_install til_yesterday: shc match @echo '*** Compiling "match" to expired date' CFLAGS="$(CFLAGS)" ./shc -vvv -e `date "+%d/%m/%Y"` -f match @echo '*** Running a compiled test script!' @echo '*** It must fail showing "./match.x: has expired!"' ./match.x ask_for_install: @echo '*** ¿Do you want to install shc?' @echo '*** Please try... make install' install: shc @echo '*** Installing shc and shc.1 on '$(INSTALL_PATH) @echo -n '*** ¿Do you want to continue? '; read ANS; case "$$ANS" in y|Y|yes|Yes|YES) ;; *) exit 1;; esac; install -c -s shc $(INSTALL_PATH)/bin/ install -c -m 644 shc.1 $(INSTALL_PATH)/man/man1/ clean: rm -f *.o *~ *.x.c cleanall: clean rm -f shc *.x -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ Kindest Regards, ☮ Paul Flint (802) 479-2360 Home (802) 595-9365 Cell / Based upon email reliability concerns, please send an acknowledgement in response to this note. Paul Flint 17 Averill Street Barre, VT 05641 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Greetings Itschak, You could protect your bash source by the Unix permissions... I know it sound niaf, in this day and age with everyone havin root, but thought it worth mentioning. Regards, Paul On Wed, 8 Feb 2017, Itschak naive wrote: Date: Wed, 8 Feb 2017 22:42:37 +0200 From: Itschak Mugzach <imugz...@gmail.com> Reply-To: i_mugz...@securiteam.co.il To: LINUX-390@VM.MARIST.EDU Subject: Re: SHC bash script compiler for Linux on z Hi Mark. my intent is to hide the code. I believe that most people wont invest time in trying to investigate it, but who knows. Any other laternative to protect bash code, or should I look into a different language? ITschak On Wed, Feb 8, 2017 at 10:27 PM, Mark Post <mp...@suse.com> wrote: On 2/8/2017 at 02:43 PM, Itschak Mugzach <imugz...@gmail.com> wrote: I wonder if any of you tried this freeware. It's not freeware. It's licensed under the GNU GPL 3. Two extremely different things. I was able to install it on Centos 7, but it seems that the makefile is not sutable for SUSE or SUSE for z.. Below is the make file. I replaced the CC with gcc but am not familier with the parms requires. I see various flavors of it in the openSUSE Build Service. Several of them build packages for both openSUSE and SLES. https://build.opensuse.org/search Looking at the description, I don't think it's going to do what you want. It's not really a compiler, so there will be no performance boost from using it. Since it encrypts and decrypts the original script and then invokes it with the running system's version of the shell, it won't provide any real protection from people being able to look at and copy the script. (I would imagine anyone even remotely familiar with gdb would be able to extract that with no problem.) What you want may be something entirely different, however, so it's up to you. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ Kindest Regards, ☮ Paul Flint (802) 479-2360 Home (802) 595-9365 Cell / Based upon email reliability concerns, please send an acknowledgement in response to this note. Paul Flint 17 Averill Street Barre, VT 05641 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
Hi Mark. my intent is to hide the code. I believe that most people wont invest time in trying to investigate it, but who knows. Any other laternative to protect bash code, or should I look into a different language? ITschak On Wed, Feb 8, 2017 at 10:27 PM, Mark Postwrote: > >>> On 2/8/2017 at 02:43 PM, Itschak Mugzach wrote: > > I wonder if any of you tried this freeware. > > It's not freeware. It's licensed under the GNU GPL 3. Two extremely > different things. > > > I was able to install it on > > Centos 7, but it seems that the makefile is not sutable for SUSE or SUSE > > for z.. Below is the make file. I replaced the CC with gcc but am not > > familier with the parms requires. > > I see various flavors of it in the openSUSE Build Service. Several of > them build packages for both openSUSE and SLES. > https://build.opensuse.org/search > > Looking at the description, I don't think it's going to do what you want. > It's not really a compiler, so there will be no performance boost from > using it. Since it encrypts and decrypts the original script and then > invokes it with the running system's version of the shell, it won't provide > any real protection from people being able to look at and copy the script. > (I would imagine anyone even remotely familiar with gdb would be able to > extract that with no problem.) > > What you want may be something entirely different, however, so it's up to > you. > > > Mark Post > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > -- ITschak Mugzach *|** IronSphere Platform* *|** An IT GRC for Legacy systems* *| Automated Security Readiness Reviews (SRR) **|* -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: SHC bash script compiler for Linux on z
>>> On 2/8/2017 at 02:43 PM, Itschak Mugzachwrote: > I wonder if any of you tried this freeware. It's not freeware. It's licensed under the GNU GPL 3. Two extremely different things. > I was able to install it on > Centos 7, but it seems that the makefile is not sutable for SUSE or SUSE > for z.. Below is the make file. I replaced the CC with gcc but am not > familier with the parms requires. I see various flavors of it in the openSUSE Build Service. Several of them build packages for both openSUSE and SLES. https://build.opensuse.org/search Looking at the description, I don't think it's going to do what you want. It's not really a compiler, so there will be no performance boost from using it. Since it encrypts and decrypts the original script and then invokes it with the running system's version of the shell, it won't provide any real protection from people being able to look at and copy the script. (I would imagine anyone even remotely familiar with gdb would be able to extract that with no problem.) What you want may be something entirely different, however, so it's up to you. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/