lkml.org 
[lkml]   [2011]   [Dec]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [GIT PULL] Crypto keys and module signing
On 12/9/2011 10:06 AM, David Howells wrote:
> James Morris <jmorris@namei.org> wrote:
>
>> Is there any reason not to sign and verify kernel modules by default?
>
> If you don't have an entropy source, your build can hang if it's waiting for
> gpg to generate a key. You need to run rngd to get around this.

... the temp key can use /dev/urandom.
seriously, /dev/urandom for one time, temp keys is not bad
(if you care about the difference, you better provide your own real key)



\
 
 \ /
  Last update: 2011-12-09 19:21    [W:0.062 / U:0.040 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site