lkml.org 
[lkml]   [2012]   [Nov]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC] Second attempt at kernel secure boot support
    On Fri, Nov 02, 2012 at 05:22:41PM +0100, Jiri Kosina wrote:
    > On Fri, 2 Nov 2012, Vivek Goyal wrote:
    >
    > > > > "crash" utility has module which allows reading kernel memory. So leaking
    > > > > this private key will be easier then you are thinking it to be.
    > > >
    > > > That's not upstream, right?
    > >
    > > Yes, checked with Dave, it is not upstream. Well, still it is a concern
    > > for distro kernel.
    >
    > Well, that's about /dev/crash, right?

    Yes, I was talking about /dev/crash.

    >
    > How about /proc/kcore?

    Yes, we will have to lock down /proc/kcore too if we go the private
    key solution way.

    Thanks
    Vivek


    \
     
     \ /
      Last update: 2012-11-02 20:01    [W:3.476 / U:0.184 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site