James Morris <jmorris@namei.org> wrote:> Is there any reason not to sign and verify kernel modules by default?If you don't have an entropy source, your build can hang if it's waiting forgpg to generate a key. You need to run rngd to get around this.David