Messages in this thread | | | Date | Tue, 19 May 2015 18:50:10 +0300 | From | Petko Manolov <> | Subject | Re: [PATCH 10/8] modsign: Allow password to be specified for signing key |
| |
On 15-05-19 15:45:58, David Woodhouse wrote: > We don't want this in the Kconfig since it might then get exposed in > /proc/config.gz. So make it a parameter to Kbuild instead. This also > means we don't have to jump through hoops to strip quotes from it, as > we would if it was a config option.
If it were on a network-less, secure sign/build server i'd say it is OK.
However, exposing your private key's password in an environment variable on a regular Linux box is a bit fishy.
cheers, Petko
| |