Menu

#1 A signed ELF binary is still vulnerable.

open
nobody
None
5
2003-05-25
2003-05-25
Anonymous
No

When checking to see if a binary is signed and
therefore trustworty, you must also check all dynamic
libraries it depends on, or it is not fully verifiable.

You might not want to add this feature, but you might
make it clearer in the documentation that additional
steps need to be taken for non-statically linked binaries.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB