A
A
Antelle2012-12-09 23:00:14
linux
Antelle, 2012-12-09 23:00:14

elf identification?

The PE (win) and mach-o (mac) formats can contain metadata about themselves in the code signature section. From them, you can identify what kind of binary it is, and check if it has been modified.
Is there something similar for elf (linux)?
I would like to get something like this:

$ codesign -v -d ./trololo
Executable=/Users/Antelle/Documents/Temp/trololo
Identifier=com.apple.ping
***

Tried all readelf options, found nothing, and Google is silent. Help, please, advice.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
Q
qxfusion, 2012-12-10
@qxfusion

for Linux, the same method is used, only without specifying an entry in the PE Security Directory www.sco.com/developers/gabi/1998-04-29/ch4.eheader.html - sign the file and add a signature in the form of an overlay, indicating the link as the last expandable data section (BUT not code)

M
motl, 2012-12-10
@motl

man elf says that the ELF header does not contain such information. (See list of header fields).

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question