| Date | Tue, 16 Dec 2014 13:05:42 -0600 | From | Seth Jennings <> | Subject | Re: [PATCHv7 0/3] Kernel Live Patching |
| |
On Tue, Dec 16, 2014 at 11:45:12PM +0530, Balbir Singh wrote: > On Tue, Dec 16, 2014 at 11:28 PM, Seth Jennings <sjenning@redhat.com> wrote: > > > > Changelog: > > > > Thanks for all the feedback! > > > > Could you describe what this does to signing? I presume the patched > module should cause a taint on module signing?
The patch module can be signed to avoid the taint of being unsigned, assuming you have the signing key for the kernel you are running. However we do taint with a new taint flag (see 1/3) to indicate that the kernel has been patched.
Seth
> > Balbir Singh
|