GitHub - YahooArchive/sigsh: a signature verifying command interpreter

This repository has been archived by the owner on Apr 18, 2019. It is now read-only.

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
certs		certs
doc		doc
src		src
test		test
CHANGES		CHANGES
LICENSE		LICENSE
README		README

Repository files navigation

sigsh is a non-interactive, signature requiring and verifying command
interpreter. More accurately, it is a signature verification wrapper
around a given shell. It reads input in PKCS#7 format from standard in,
verifies the signature and, if the signature matches, pipes the decoded
input into the command interpreter.

Related:
	NetBSD's Veriexec
	MS Powershell ExecutionPolicy
	OpenBSD's "Stephanie" / TPE
		http://packetfactory.openwall.net/projects/stephanie/index.html
	Linux Trusted Path Execution