1 个仓库
Awesome GitHub RepositoriesBinary Execution Authorization
Mechanisms that permit or deny the execution of binaries based on allow-lists and block-lists.
Distinct from Binary Execution Restrictions: Unlike execution restrictions which often focus on storage volumes, this focuses on binary-specific trust verification.
Explore 1 awesome GitHub repository matching security & cryptography · Binary Execution Authorization. Refine with filters or upvote what's useful.
Awesome Binary Execution Authorization GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- google/santa
google/santa
4,510在 GitHub 上查看Santa 是一个专为 macOS 设计的二进制授权系统，旨在根据定义的信任规则控制和监控哪些二进制文件可以执行。它作为应用程序白名单软件，通过根据加密哈希和签名证书进行验证，防止未经授权的程序运行。 该系统通过记录每个二进制启动事件来提供执行监控，从而创建可见的软件执行轨迹。它支持集中式审计日志，以跟踪跨多个设备的成功和被拒绝的应用程序启动，通过同步规则和日志确保企业设备合规性。 控制通过规则系统进行管理，该系统利用加密校验和、数字签名验证和正则表达式路径匹配。该框架包括内核级执行拦截，以便在二进制文件运行前进行验证，并维护一个本地数据库用于记录活动和审计。
Restricts the execution of binaries by verifying them against defined allow-lists or block-lists.
Objective-C++
