Messages in this thread | | | From | Florian Weimer <> | Subject | Re: [GIT PULL] Load keys from signed PE binaries | Date | Mon, 25 Feb 2013 15:46:14 +0100 |
| |
* Peter Jones:
> I just want to make sure this doesn't go unresponded to - Red Hat > will not sign kernel modules built by an outside source. We're simply > not going to sign these kernel modules. That's one of the big reasons > we want a setup where they can sign their own modules in the first place.
You could just drop the requirement that ring 0 code must be signed. I don't think Windows 8 enforces this, but I'm not yet sure if there is a physical presence check before you can enter a mode in which Windows loads self-signed kernel modules.
| |