linux-kernel - Re: Build Linux kernel to have comparable zImages

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20170209094613.62f602ca@jawa>
Date:   Thu, 9 Feb 2017 09:46:13 +0100
From:   Lukasz Majewski <lukma@...x.de>
To:     Andrew Donnellan <andrew.donnellan@....ibm.com>
Cc:     linux-kernel@...r.kernel.org
Subject: Re: Build Linux kernel to have comparable zImages

On Thu, 9 Feb 2017 11:25:15 +1100
Andrew Donnellan <andrew.donnellan@....ibm.com> wrote:

> On 08/02/17 20:20, Lukasz Majewski wrote:
> > Dear All,
> >
> > Maybe somebody can point me to solution to the following problem:
> >
> > Problem:
> >
> > I do want to be able to compare (with e.g. md5sum, sha1) two linux
> > zImages. The problem is that Linux compiles in current build time
> > into the binary. Hence, even two identical builds will have
> > different hash.
> >
> > Why:
> >
> > I do want to do some considerable Kconfig rework and avoid situation
> > where some option would be left not enabled.
> 
> You might want to look at 
> https://github.com/hardenedlinux/grsecurity-reproducible-build, I'm
> not familiar with it at all but it seems to be somewhat in the
> direction you're after.

Thanks for pointing this out :-).

> 


Best regards,

Lukasz Majewski

--

DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-10 Fax: (+49)-8142-66989-80 Email: wd@...x.de