lkml.org 
[lkml]   [2016]   [Nov]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject
    Date
    From e8196ab86d10c24a9ebc87a1007a4047dc77bab8 Mon Sep 17 00:00:00 2001
    From: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>
    Date: Mon, 21 Nov 2016 15:46:20 -0500
    Subject: [PATCH v3 0/4] Certificate insertion support for x86 bzImages

    These patches add support for modifying the reserved space for extra
    certificates in a compressed bzImage in x86. This allows separating the
    system keyring certificate from the kernel build process. After the kernel
    image is distributed, the insert-sys-cert script can be used to insert the
    certificate for x86.

    Changes:

    v3:
    * Rewrote 1/4 to insert incompressible bytes are at build time. Previous
    solution required changes to <arch>/boot/Makefile's for modifying the
    vmlinux file after linking, and did not work well with cross compilation.
    * Added 2/4 for ELF class-independent processing of vmlinux file, in case the
    script was compiled for 64-bit and the kernel was compiled for 32-bit.
    * Reordered 3/4, added x86 bzImage boot version (>=2.08) verification.

    v2:
    * Rebased arch/boot/x86/Makefile patch (removed in v3)

    Mehmet Kayaalp (4):
    KEYS: Insert incompressible bytes to reserve space in bzImage
    KEYS: Add ELF class-independent certificate insertion support
    KEYS: Support for inserting a certificate into x86 bzImage
    KEYS: Print insert-sys-cert information to stdout instead of stderr

    certs/Makefile | 21 +-
    certs/system_certificates.S | 2 +-
    scripts/Makefile | 1 +
    scripts/insert-sys-cert.c | 455 +++++++++++++++++++++++++++++++++-----------
    4 files changed, 362 insertions(+), 117 deletions(-)

    --
    2.7.4

    \
     
     \ /
      Last update: 2016-11-22 05:17    [W:2.492 / U:1.680 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site