Messages in this thread | | | Date | Mon, 05 Nov 2012 09:37:18 -0600 | From | Chris Friesen <> | Subject | Re: [RFC] Second attempt at kernel secure boot support |
| |
On 11/05/2012 09:31 AM, Jiri Kosina wrote:
> I had a naive idea of just putting in-kernel verification of a complete > ELF binary passed to kernel by userspace, and if the signature matches, > jumping to it. > Would work for elf-x86_64 nicely I guess, but we'd lose a lot of other > functionality currently being provided by kexec-tools. > > Bah. This is a real pandora's box.
Would it be so bad to statically link kexec?
Chris
| |