News for hackers. Stuff that matters.

A comment on SSHD: Random boot time relinking, OpenBSD.

Re:SSHD: Random boot time relinking, OpenBSD by LinuxBender on Friday January 20, 2023 @01:37PM (#34457630)
What impact will this have on anti-tampering software that looks for changes in executable checksums? Tripwire and OSSEC come to mind. Do package integrity tests still work? I assume anyone here using BSD in a PCI environment have already figured something out.
[ Parent | on HN ]
Re:SSHD: Random boot time relinking, OpenBSD by antx on Friday January 20, 2023 @01:49PM (#34457817)
Very good point. As per Job snijder's own words [0], "the sshd binary becomes unique on every openbsd machine". So checksum-checking systems will indeed trip everytime.

[0]: https://marc.info/?l=openbsd-tech&m=167388832715992&w=2

[ Parent | on HN ]