Messages in this thread | | | Date | Fri, 09 Dec 2011 10:18:08 -0800 | From | Arjan van de Ven <> | Subject | Re: [GIT PULL] Crypto keys and module signing |
| |
On 12/9/2011 10:06 AM, David Howells wrote: > James Morris <jmorris@namei.org> wrote: > >> Is there any reason not to sign and verify kernel modules by default? > > If you don't have an entropy source, your build can hang if it's waiting for > gpg to generate a key. You need to run rngd to get around this.
... the temp key can use /dev/urandom. seriously, /dev/urandom for one time, temp keys is not bad (if you care about the difference, you better provide your own real key)
| |