Apparatus and method for secure module build

An apparatus for securely building a module for a consumer computing system, the apparatus comprising:

• a coordination server, configured to receive configuration and makefile data associated with the consumer computing system, and configured to place said data in a queue, and configured to provide the module to the consumer computing system;
• and
• a build server, coupled to said coordination server and corresponding to said configuration data, configured to receive said data from said queue, and configured to build the module based on commands within said makefile data, said build server comprising:
• a secure root, configured to execute whitelist commands to generate named object files from proprietary source files;
• and
• a public root, configured to extract said whitelist commands from said makefile data, to transfer said whitelist commands to said secure root, to receive said named object files, to rename said object files into renamed object files according to said whitelist commands, and to links said renamed object files to generate the module.

A method for securely building a module for a consumer computing system, the method comprising:

• via a coordination server, receiving configuration and makefile data associated with the consumer computing system, and placing the data in a queue, and returning the module to the consumer computing system;
• and
• via a build server, receiving the data from the queue, and building the module based on commands within the makefile data, said building comprising:
• extracting whitelist commands from the makefile data within a public root of the build server;
• executing the whitelist commands within a secure root of the build server to generate named object files from proprietary source files;
• transferring the named object files to the public root;
• renaming the object files into renamed object files according to the whitelist commands;
• and
• linking the renamed object files to generate the module.