>How can you stop malware fiddling with bits to allow installation of extensions? Require signed extensions - and have the code that does the signing check be

>How can you stop malware fiddling with bits to allow installation of extensions? Require signed extensions - and have the code that does the signing check be locked for modification (e.g. 755 root in /usr/)