Messages in this thread | | | Date | Mon, 18 May 2015 09:22:14 -0700 | Subject | Re: Should we automatically generate a module signing key at all? | From | Linus Torvalds <> |
| |
On Mon, May 18, 2015 at 9:19 AM, David Woodhouse <dwmw2@infradead.org> wrote: > > I prefer the other solution I suggested a few minutes ago — let > signing_key.{priv,x509} be autogenerated, and if the user wants to > provide their own then let them call it something else.
Absolutely. And external keys probably shouldn't be in the build tree at all, they should be a pointer to outside the build tree (ie "I have my magic kernel key on the USB key that I mount at xyz").
Linus
| |