Messages in this thread | | | Date | Wed, 13 May 2015 20:46:23 +0200 | From | "Luis R. Rodriguez" <> | Subject | Re: [RFC v2 6/6] firmware: add firmware signature checking support |
| |
On Wed, May 13, 2015 at 11:23:56AM -0700, Luis R. Rodriguez wrote: > From: "Luis R. Rodriguez" <mcgrof@suse.com> > > As with module signing, we do a very simple search for a > particular string appended to the firmware. There's both a > config option and a boot parameter which control whether we > accept or fail with unsigned firmware and firmware that are > signed with an unknown key. > > If firmware signing is enabled, the kernel will be tainted > if a firmware is loaded that is unsigned or has a signature > for which we don't have the key.
Sorry this commit log is obviously still from the v1, the cover letter addresses the changes best...
Luis
| |