Re: Default Deny on Executables

["Kurt Seifried" <listuser () seifried org>]

> The OpenBSD stephanie project too, TPE & Verified Exec.
>
> http://www.innu.org/~brian/Stephanie/
>
> <plea>Abandoned project now, maybe someone here thinks it's cool
> enough to pick up </plea>
>
> S.

As well there are third party products for Windows such as SecureExe 
(everytime something runs the md5 or sha1 hash is checked against the allow 
list), looks like they renamed it to Sanctuary, at Securewave.com. This type 
of thing has been available for most operating systems for several years, 
the difference being it's going to be baked in now and have (hopefully) good 
management tools integrated with the rest of your security infrastructure 
(well.. maybe the next version will anyways =).

-Kurt