3 ms·
You'd codesign the scripts, yeah. I've done that before when using an interpreter. It's not trivial but all the major script runtimes that matter have relevant
by kevingadd 8y ago
You'd codesign the scripts, yeah. I've done that before when using an interpreter. It's not trivial but all the major script runtimes that matter have relevant embedding hooks to let you do it.
- stevekemp 8y agoPresumably you'd need to do more than sign/check the script running as the argument though? For example: #!/usr/bin/perl use module; print "OK\n"; The module could have been modified by a local user too - so you need to check all libraries that are included/opened too? That would seem to be a lot of work.