2004-10-15 15:41:22

by Chuck Ebbert

[permalink] [raw]
Subject: Re: Fw: signed kernel modules?

David Woodhouse <[email protected]> wrote:

> On Thu, 2004-10-14 at 23:36 +0200, Roman Zippel wrote:
> > No. I still don't know, why the kernel has to do this? You avoided to
> > answer this question already before.
>
> Partly to protect against accidentally-corrupted modules causing damage.

OK, so why no integrity-checking code for the kernel itself? Surely it too
could be accidentally corrupted...


--Chuck Ebbert 15-Oct-04 11:13:15


2004-10-15 16:07:03

by Olivier Galibert

[permalink] [raw]
Subject: Re: Fw: signed kernel modules?

On Fri, Oct 15, 2004 at 11:37:57AM -0400, Chuck Ebbert wrote:
> OK, so why no integrity-checking code for the kernel itself? Surely it too
> could be accidentally corrupted...

The kernel is CRC32-ed. Maybe it's part of the bzimage handling
though.

OG.