[fpc-pascal] Linux elf with signed checksum

[ik]

Hello,

I see that most of the ELF on my system, contain a signature like so:

ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked
(uses shared libs), for GNU/Linux 2.6.32,
BuildID[sha1]=0x39645af26ea483eaae81df45bf34701580506115, stripped

There are two very interesting signatures here that does not exists when
creating an ELF with FPC:
1. GNU/Linux 2.6.32
2. BuildID[sha1]=0x39645af26ea483eaae81df45bf34701580506115

The second part is more interesting for this subject: It signs a checksum
of the ELF file, so any change to it will break the checksum.
It helps you to discover for example root-kits.

Is it a compiler based signature, or something from the build itself ?
If it's from the compiler itself, what is the requirement to add such
support for FPC ?

Thanks,
Ido
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20120528/4598da62/attachment.html>