Re: [PATCH v5 00/21] EVM

[Valdis . Kletnieks]

On Tue, 31 May 2011 08:05:08 EDT, Mimi Zohar said:

> For files that you don't expect to change, such as ELF executables, you
> probably could use the immutable flag, but using a digital signature
> provides authenticity as well, which the immutable flag does not
> provide.

The problem with 'chattr +i' is that if an attacker gets root, they can 'chattr
-i' and start scribbling. I've never personally trusted it for anything more
than protecting against overexuberant root processes that forget to obey file
permissions (like the DHCP script that keeps insisting on removing all the IPv6
nameservers out of my /etc/resolv.conf even when it's mode 444). As you noted,
digitally signing the executables with a key not found on the system raises the
bar substantially..

Attachment: pgp00000.pgp
Description: PGP signature