Re: How to protect a file from debugging

[Oliver Welter <mail@oliwel.de>]

[-- Attachment #1: Type: text/plain, Size: 841 bytes --]

>> I have an application, lets say a simple text editor, that is used to
>> read/write sensitive information.
>> Now I start gdb, attach it to the process and call "gcore" which - for
>> my understanding - dumps the entire memory of the process to a file. So
>> the core dump reveals my secret data.
> 
> Why is that a problem?  You are one only reading the same secret data
> that you just entered yourself in the editor.
> 

Before the editor can access the data, its integrity is checked and the
editor has certain properties, e.g. not allowing to store the data
outside of an encrypted filesystem. So if an unchecked application can
gather the data, it might leave the system.

Oliver

-- 
Protect your environment -  close windows and adopt a penguin!
PGP-Key: 3B2C 8095 A7DF 8BB5 2CFF  8168 CAB7 B0DD 3985 1721



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]