Re: malware defense

Horst von Brand (vonbrand@sleipnir.valparaiso.cl)
Tue, 07 Dec 1999 00:05:16 -0300


Douglas Kilpatrick <dougk@tislabs.com> said:

[...]

> Exec is fairly expensive anyway (well, exec isn't, but loading and linking
> programs is). As long as the check is reasonably quick most people won't
> notice it.

You will certainly note an (expensive!) computation of a cryprograpic hash
over _all_ the executable and the libraries it loads on startup. Today you
use demand loading, and minor pieces like glibc are already at hand...

--
Horst von Brand                             vonbrand@sleipnir.valparaiso.cl
Casilla 9G, Viņa del Mar, Chile                               +56 32 672616

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/