linux-kernel - Re: RFC: sign the modules at install time

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 17 Oct 2012 20:27:03 -0700
From:	Linus Torvalds <torvalds@...ux-foundation.org>
To:	Rusty Russell <rusty@...tcorp.com.au>
Cc:	David Miller <davem@...emloft.net>,
	David Howells <dhowells@...hat.com>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: RFC: sign the modules at install time

On Wed, Oct 17, 2012 at 6:17 PM, Rusty Russell <rusty@...tcorp.com.au> wrote:
>
> You cut too much: you need genkeyid.

Yeah, I sent out a fixed version later, but I much prefer your version
that generates those files earlier, not a "make modules_install".

[ Btw, your email "Date:" field is from 2+ hours ago, but it hit
ozlabs and then arrived here only minutes ago. There's some delay in
your mail delivery. Maybe it's something you know about, and you're
batching emails over carrier pigeons, but I thought I'd mention it in
case you weren't aware of some odd SMTP delay ]

> And in a moment of optimism I tried 'make modules_install MODLIB=.' to
> sign modules in-place.  It deleted my kernel/ dir.  Don't recommend.

Heh. I assume that's an old "feature", not something that has anything
to do with the whole signing thing.

            Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/