Messages in this thread | | | Date | Fri, 2 Nov 2012 14:30:51 -0400 | From | Vivek Goyal <> | Subject | Re: [RFC] Second attempt at kernel secure boot support |
| |
On Fri, Nov 02, 2012 at 05:22:41PM +0100, Jiri Kosina wrote: > On Fri, 2 Nov 2012, Vivek Goyal wrote: > > > > > "crash" utility has module which allows reading kernel memory. So leaking > > > > this private key will be easier then you are thinking it to be. > > > > > > That's not upstream, right? > > > > Yes, checked with Dave, it is not upstream. Well, still it is a concern > > for distro kernel. > > Well, that's about /dev/crash, right?
Yes, I was talking about /dev/crash.
> > How about /proc/kcore?
Yes, we will have to lock down /proc/kcore too if we go the private key solution way.
Thanks Vivek
| |