Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 00/23] Crypto keys and module signing | Date | Tue, 05 Jun 2012 14:37:54 +0100 |
| |
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:
> As the signature would be stored as an extended attribute, we wouldn't > need to pass it. Unfortunately not all filesystems have xattr support, > nor do all of the package installation mechanims. The benefit of > storing the signature as an extended attribute, however, is that there > is a consistent mechanism for verifying file data integrity for all > files, not only ELF.
We also want to be able to do module signature verification with CONFIG_IMA=n.
David
| |