Subject: Re: verified executable kernel modification committed
To: Christopher Richards <richards+netbsd@CS.Princeton.EDU>
From: Lennart Augustsson <lennart@augustsson.net>
List: current-users
Date: 10/29/2002 21:14:37
I'd love to see PCC incorporated into NetBSD.  And Peter would probably
like it too. :-)
But I've got no time to do the work. :(

    -- Lennart


Christopher Richards wrote:

>Brett Lymn <blymn@baesystems.com.au> writes:
>
>  
>
>>Folks,
>>        First off let me say a big thanks to the people who told me
>>this crazy idea was good.  Especially thanks to Jason R Fink for doing
>>the hard yards and helping me out in thrashing this into the shape it
>>is currently in.  I feel this code is ready enough to be useful but
>>there are some aspects that can be improved on.
>>    
>>
>
>It would be a great advantage if the verified exec framework were
>flexible enough to accommodate a variety of verification schemes.
>Cryptographic hashes may be the most obvious of these, but there are
>others -- Proof-Carrying Code [1, 2], for example, where execution of
>a binary is permitted only if its associated proof of safety satisfies
>the system proof-checker.
>
>For an overview of PCC and mobile-code security, see Peter Lee's page
>at <http://www.cs.cmu.edu/~petel/papers/pcc/pcc.html>.
>
>  
>