Messages in this thread | | | Date | Tue, 29 Jan 2013 11:30:36 -0500 | From | Vivek Goyal <> | Subject | Re: [RFC 1/1] ima: digital signature verification using asymmetric keys |
| |
On Mon, Jan 28, 2013 at 07:14:02PM -0500, Mimi Zohar wrote:
[..] > The 'trusted' keyring is a solution for installing only distro or third > party signed packages. How would a developer, for instance, create, > sign, and install his own package and add his public key safely?
Hi Mimi,
I guess using MOK, developer should be able to import his public key in shim database and in turn in kernel and use that to load user signed moduels.
Thanks Vivek
| |