On Thu, Nov 01, 2012 at 10:43:04AM -0400, Vivek Goyal wrote: > So I think this does satisfy the requirement matthew specified. Isn't it? > Matthew, what do you think? Sure, if you can ensure that. You'll need to figure out how to get the build system to sign the userspace binaries and you'll need to ensure that they're statically linked and don't dlopen anything (including the nsswitch modules), but otherwise that should work. -- Matthew Garrett | mjg59 at srcf.ucam.org
