Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752490AbbETFmW (ORCPT ); Wed, 20 May 2015 01:42:22 -0400 Received: from ozlabs.org ([103.22.144.67]:52017 "EHLO ozlabs.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751019AbbETFmN (ORCPT ); Wed, 20 May 2015 01:42:13 -0400 From: Rusty Russell To: Andy Lutomirski , Linus Torvalds , David Howells Cc: Michal Marek , David Woodhouse , Abelardo Ricart III , Linux Kernel Mailing List , Sedat Dilek , keyrings@linux-nfs.org, LSM List , Borislav Petkov , Jiri Kosina Subject: Re: Should we automatically generate a module signing key at all? In-Reply-To: <555A88FB.7000809@kernel.org> References: <31154.1431965087@warthog.procyon.org.uk> <555A88FB.7000809@kernel.org> User-Agent: Notmuch/0.17 (http://notmuchmail.org) Emacs/24.4.1 (x86_64-pc-linux-gnu) Date: Wed, 20 May 2015 14:31:29 +0930 Message-ID: <87fv6rhmfq.fsf@rustcorp.com.au> MIME-Version: 1.0 Content-Type: text/plain Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1441 Lines: 39 Andy Lutomirski writes: > On 05/18/2015 09:20 AM, Linus Torvalds wrote: >> On Mon, May 18, 2015 at 9:04 AM, David Howells wrote: >>> >>> Should we instead provide a script: >>> >>> ./scripts/generate-key >>> >>> That generates a key if run and make it so that the build fails if you turn on >>> module signing and there's no key. >> >> That would just be stupid. >> >> I'm not ever applying a patch like that. That would absolutely destroy >> the sane "git clean + rebuild" model. >> >> Why the hell would you want to make the sane case that people actually >> *use* be harder to use. >> >> Nobody sane bothers with long-term keys. They are inconvenient and less secure. >> >> Put the onus on making it inconvenient on those people who actually >> have special keys, not on normal people. >> > > I think we should get rid of the idea of automatically generated signing > keys entirely. Instead I think we should generate, at build time, a > list of all the module hashes and link that into vmlinux. Yep, suggested that long ago. But people want signatures, because the actual push for pubkeys was never the temp-pubkey model. Cheers, Rusty. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/