linux-kernel - Re: [PATCH v9 4/7] sign-file: add support to sign modules in bulk

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAK7LNATovC3UQcNC21vyjU-rNOUX02M6KehA6Vz7QuWHjD7PHg@mail.gmail.com>
Date:   Sun, 13 Aug 2023 21:26:58 +0900
From:   Masahiro Yamada <masahiroy@...nel.org>
To:     Greg KH <gregkh@...uxfoundation.org>
Cc:     Shreenidhi Shedi <yesshedi@...il.com>, dhowells@...hat.com,
        dwmw2@...radead.org, nathan@...nel.org, ndesaulniers@...gle.com,
        nicolas@...sle.eu, linux-kernel@...r.kernel.org, sshedi@...are.com,
        linux-kbuild@...r.kernel.org
Subject: Re: [PATCH v9 4/7] sign-file: add support to sign modules in bulk

On Fri, Aug 11, 2023 at 6:10 AM Greg KH <gregkh@...uxfoundation.org> wrote:
>
> On Wed, Aug 09, 2023 at 10:52:07PM +0530, Shreenidhi Shedi wrote:
> > In the existing system, we need to invoke sign-file binary for every
> > module we want to sign. This patch adds support to give modules list
> > in bulk and it will sign them all one by one.
>
> But you never actually use this option in the kernel build process?  If
> not, why add this at all?
>
> thanks,
>
> greg k-h


Agree.
The bulk-sign flag is never used in the upstream kernel.
We cannot accept this.


-- 
Best Regards
Masahiro Yamada