| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <50F5E5FE.9040304@csamuel.org> Date: Wed, 16 Jan 2013 10:27:58 +1100 From: Chris Samuel <chris@...muel.org> To: linux-kernel@...r.kernel.org CC: Rusty Russell <rusty@...tcorp.com.au>, dhowells@...hat.com, Michal Marek <mmarek@...e.cz> Subject: Re: [RFC] [PATCH] Disable INSTALL_MOD_STRIP when CONFIG_MODULE_SIG set /* Please CC, not on LKML */ On 15/01/13 07:36, Chris Samuel wrote: > So we set mod_strip_cmd to be true to prevent it stripping kernel > modules, just as happens if INSTALL_MOD_STRIP is not passed. Ignore this patch, sorry for the noise. I'd tested by comparing the modules produced by the build system in this patch with the ones produced by make-kpkg and missed the fact that *after* doing the module install make-kpkg then runs objcopy on the modules to copy out the debug sections for a debug package and then uses objcopy to remove the same debug sections (along with the signature) from the ones in the main package. :-( I'd also misread the order that the strip and signing happens, so that the kernel signs after stripping, so there is nothing to fix. Interestingly stripping them only saves 1MB out of 120MB for me, so it hardly seems worth doing. -- Chris Samuel : http://www.csamuel.org/ : Melbourne, VIC -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists