PREVIEW: bsign embeds hash and/or digital signature in ELF files

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"OL" == Oscar Levi <elf at buici.com> writes:

OL> Where is the complexity?  How much simpler can it get that embedding
OL> signatures in the files themselves?

Having a (redundantly stored, if necessary) database containing the
complete path to the file and the file's signature.  It works regardless of
file types, OS variant, and you can store other information such as time
stamps, ownership and permissions.

>> Take a look at what Tripwire does.
OL> Where can I find that?

The COAST archive at <URL:http://www.cs.purdue.edu/coast/> is the canonical
source for Tripwire, both code and information about it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.4.5 (GNU/Linux)
Comment: For info finger gcrypt at ftp.guug.de

iD8DBQE2dT7Igl+vIlSVSNkRArqqAKDcpG61ZfRVus02nBE5xZuxufkaQwCffNoX
h0YYOuN3qypOmOQh4C0Trx4=
=yRA3
-----END PGP SIGNATURE-----

-- 
Rat <ratinox at peorth.gweep.net>    \ If Happy Fun Ball begins to smoke, get
PGP Key: at a key server near you! \ away immediately. Seek shelter and cover
GPG Key: same as my PGP 5 (DH) key  \ head.