lkml.org 
[lkml]   [2012]   [Jun]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH 00/23] Crypto keys and module signing
Date
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:

> As the signature would be stored as an extended attribute, we wouldn't
> need to pass it. Unfortunately not all filesystems have xattr support,
> nor do all of the package installation mechanims. The benefit of
> storing the signature as an extended attribute, however, is that there
> is a consistent mechanism for verifying file data integrity for all
> files, not only ELF.

We also want to be able to do module signature verification with CONFIG_IMA=n.

David


\
 
 \ /
  Last update: 2012-06-05 16:41    [W:0.074 / U:0.160 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site