Re: Executable signing - a proposal

[Gareth Nelson]

For scripts that are set executable, it works exactly the same way - for
everything else it won't work unless the interpreter is patched, it's still
an overall massive improvement in security.

---
“Lanie, I’m going to print more printers. Lots more printers. One for
everyone. That’s worth going to jail for. That’s worth anything.” -
Printcrime by Cory Doctrow

Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html

On Tue, Mar 31, 2015 at 2:06 PM, Martin Schröder <mar...@oneiros.de> wrote:

> 2015-03-31 9:52 GMT+02:00 Gareth Nelson <gar...@garethnelson.com>:
> > 2 - All executables on the system must be signed with that public key
> > 3 - Any executable not signed is essentially chmod -x
>
> How does this help with interpreted code (e.g. shell, perl, python, java)?
>
> Best
>    Martin