Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753856AbbESSjE (ORCPT ); Tue, 19 May 2015 14:39:04 -0400 Received: from bombadil.infradead.org ([198.137.202.9]:47607 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753169AbbESSjB (ORCPT ); Tue, 19 May 2015 14:39:01 -0400 Message-ID: <1432060732.3277.77.camel@infradead.org> Subject: Re: Should we automatically generate a module signing key at all? From: David Woodhouse To: Andy Lutomirski Cc: Linus Torvalds , Andy Lutomirski , David Howells , Michal Marek , Abelardo Ricart III , Linux Kernel Mailing List , Sedat Dilek , keyrings@linux-nfs.org, Rusty Russell , LSM List , Borislav Petkov , Jiri Kosina Date: Tue, 19 May 2015 19:38:52 +0100 In-Reply-To: References: <31154.1431965087@warthog.procyon.org.uk> <555A88FB.7000809@kernel.org> <1432058889.3277.73.camel@infradead.org> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.12.11 (3.12.11-1.fc21) Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 598 Lines: 18 On Tue, 2015-05-19 at 11:12 -0700, Andy Lutomirski wrote: > With your proposal, I need to trust that whoever built the actual > running kernel image really did throw away the key. Ah right, that makes sense. So it might make sense to use the LSM hook for checking hashes then. It's kind of orthogonal to the *signing* discussion though. -- dwmw2 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/