Messages in this thread | | | Date | Mon, 10 Feb 2014 14:51:09 +0100 | From | Michal Marek <> | Subject | Re: [PATCH RFC] kernel build: enable use of password-protected signing keys |
| |
On 9.2.2014 23:38, Emily Maier wrote: > Currently, the module signing script assumes that the private key is > not password-protected. This patch makes it slightly more secure by > allowing it to be passed in on the command line as "make > modules_install MOD_PASSWORD=abc". It's vulnerable to snooping during > the build of course, but so is an unprotected signing key.
The key's permissions can be set to 0600, while the make commandline is visible in ps.
Michal
| |