lkml.org 
[lkml]   [2015]   [May]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Should we automatically generate a module signing key at all?
From
Date
On Tue, 2015-05-19 at 11:12 -0700, Andy Lutomirski wrote:
> With your proposal, I need to trust that whoever built the actual
> running kernel image really did throw away the key.

Ah right, that makes sense.

So it might make sense to use the LSM hook for checking hashes then.
It's kind of orthogonal to the *signing* discussion though.

--
dwmw2




\
 
 \ /
  Last update: 2015-05-19 21:21    [W:0.103 / U:0.156 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site