1

In "Uninformed Research -- informative information for the uninformed." 2003 mentions a tool called elfsign and elfverify. This is a tool to checksum and sign an ELF binary.

I can't find that tool in Debian. Does it still exist and is it maintained?

  • If your goal is just to guarantee integrity when running executables, consider using IMA (Integrity Measurement Architecture) for Linux, which does this at the kernel level by using extended attributes. – forest Dec 24 '18 at 5:21
2

That tool seems to be written by the same author of the paper skape (mmiller@hick.org). It's withheld from Debian for licensing reasons -- currently being under "The Clarified Artistic License".

The code can be found on his site,

  • 1
    Other tools purportedly for this purpose include signelf and elfpgp. I suspect that there is more than one Q&A to be had on this subject. (-: – JdeBP Nov 20 '18 at 8:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.