Messages in this thread | | | From | David Howells <> | Subject | Re: Should we automatically generate a module signing key at all? | Date | Fri, 22 May 2015 23:18:27 +0100 |
| |
Linus Torvalds <torvalds@linux-foundation.org> wrote:
> And yes, he would need the ability to insert his own public key in the > kernel image (he already has the ability to re-sign the modules, we > have the script for that in the kernel build tree).
With UEFI he could also store his key there. We assume we can trust the keys there.
David
| |