lkml.org 
[lkml]   [2012]   [Nov]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH RFC 0/4] Add firmware signature file check
    At Mon, 05 Nov 2012 18:18:24 +0100,
    Takashi Iwai wrote:
    >
    > Hi,
    >
    > this is a patch series to add the support for firmware signature
    > check. At this time, the kernel checks extra signature file (*.sig)
    > for each firmware, instead of embedded signature.
    > It's just a quick hack using the existing module signing mechanism,
    > thus provided only as a proof of concept for now.
    >
    > To be noted, it doesn't support the firmwares via udev but only the
    > direct loading, and the check for built-in firmware is missing, too.

    On the second thought, checking the signature for builtin firmwares is
    superfluous. And udev usage for firmware loading should be pretty
    rare with 3.7 kernel. So, locking down the udev loading case when
    sig_enforce = true should suffice in most cases, I guess.


    Takashi


    \
     
     \ /
      Last update: 2012-11-05 19:42    [W:3.524 / U:0.044 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site