Messages in this thread | | | From | David Howells <> | Subject | Re: Should we automatically generate a module signing key at all? | Date | Tue, 19 May 2015 13:52:03 +0100 |
| |
David Woodhouse <dwmw2@infradead.org> wrote:
> Then when one module is loaded, we also have to pass in a table containing > all the other sha256's. The kernel checks the sha256 of what's being loaded, > checks it matches what's in the table that was also loaded. And then > validates the integrity of that table.
That's basically Andy's idea with a special module containing the table. But unless you want to reload the table every time you load a module, you haven't gained anything.
David
| |