Re: execution policy for shells

[Jan Schaumann <jschauma%netmeister.org@localhost>]

Thor Lancelot Simon <tls%panix.com@localhost> wrote:
 
> So you need the shell to be the thing whose fingerprint is known to the
> kernel

Yes.

>, and the interpreted scripts to be known to the shell.

I'd like to avoid having to know in advance the scripts the shell might
run.  I'd rather say "only run a scrip -- any script -- if it's signed
by X".

-Jan

Attachment: pgpQoPRqCEjlR.pgp
Description: PGP signature