Messages in this thread | | | Date | Sat, 10 Dec 2011 01:31:49 +1100 (EST) | From | James Morris <> | Subject | Re: [GIT PULL] Crypto keys and module signing |
| |
On Fri, 9 Dec 2011, Arjan van de Ven wrote:
> the best way to deal is to have KBUILD generate a key on demand ;-)
Yes -- I'd like to see this code do something useful by default when enabled, so yes, create a local key during the build, possibly configurable via kconfig.
Is there any reason not to sign and verify kernel modules by default?
- James -- James Morris <jmorris@namei.org>
| |