site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com On Mar 6, 2009, at 9:53 AM, Tim Murison wrote: The code-signature still passes. So, my question is WTF? Scratch that... I got myself confused. If I add stuff to the end of the file, the signature passes. You can't modify the code segment and keep a valid signature though. When signing a fat Mach file, each architecture is signed independently. So you could use lipo to thin a fat Mach file, which is certainly a massive change, and the remaining architectures' code signatures would still validate. -- Damien Sorresso BSD Engineering Apple Inc. smime.p7s