Thanks, we'll look at this. At first glance the patch looks very reasonable,
and it's in line with the other configurable OEM strings.
- Michal
________________________________
From: vbox-dev <[email protected]> on behalf of Eckardt, Hendrik
via vbox-dev <[email protected]>
Sent: Friday, September 22, 2023 10:56 AM
To: [email protected] <[email protected]>
Subject: [vbox-dev] [PATCH] Make identifier strings in MPS table configurable
Hi,
I've created a patch that makes the OEM ID and Product ID strings in the MPS
table (PCMP) configurable. Some malware binaries check these strings and refuse
to run if VirtualBox is detected, and there was no way to change the strings
without recompiling VirtualBox (or patching the VBoxDD binary).
Two new configuration options MpsOEMId and MpsProductId are added to pcbios/efi
in a similar fashion that Dmi is already configurable. If the options are not
set, there should be no observable difference to previous builds.
The patch is provided to you under the MIT license, please feel free to tweak
it as you see fit.
Best regards,
Hendrik
--
Hendrik Eckardt
Security Engineer
M: [email protected]
G DATA Advanced Analytics GmbH
G DATA Campus . Königsallee 178
D-44799 Bochum, Germany . https://www.gdata.de/business
HRB Bochum 15802 . USt-ID-Nr.: DE303701188
Geschäftsführer: Michael Zimmer
G DATA | ADVANCED ANALYTICS
_______________________________________________
vbox-dev mailing list
[email protected]
https://www.virtualbox.org/mailman/listinfo/vbox-dev
