MIME-Version: 1.0
In-Reply-To: <24795.1432333107@warthog.procyon.org.uk>
References: <CA+55aFxLRaZpBPUwPabmNoYGwTraM0aLv06rNPhstyT3k+hBig@mail.gmail.com>
	<20150522141358.2581.qmail@ns.horizon.com>
	<CA+55aFxYa9rd8mrJjkbUvKvLifn8uos40uNjj8L1ug873i5_aQ@mail.gmail.com>
	<CALCETrWvmV0Qn-qSG0ROg913Cu2va2FYbe2bihmFW4rriU0GVA@mail.gmail.com>
	<CA+55aFwBgeUeFK9HvjD3aX=p_Ad9zSvEVJtbC8NuHcOPrcMubA@mail.gmail.com>
	<24795.1432333107@warthog.procyon.org.uk>
Date: Fri, 22 May 2015 15:21:51 -0700
Message-ID: <CA+55aFx=ZP=nLo8b+sxzwB6CYE8nOZUfWqFW75ptWNhZ8+Mhow@mail.gmail.com>
Subject: Re: Should we automatically generate a module signing key at all?
From: Linus Torvalds <torvalds@linux-foundation.org>
To: David Howells <dhowells@redhat.com>
Cc: Andy Lutomirski <luto@amacapital.net>, George Spelvin <linux@horizon.com>,
        David Woodhouse <dwmw2@infradead.org>,
        Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
        LSM List <linux-security-module@vger.kernel.org>, petkan@mip-labs.com,
        "Theodore Ts'o" <tytso@mit.edu>, Mimi Zohar <zohar@linux.vnet.ibm.com>
Content-Type: text/plain; charset=UTF-8
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 570
Lines: 14

On Fri, May 22, 2015 at 3:18 PM, David Howells <dhowells@redhat.com> wrote:
>
> With UEFI he could also store his key there.  We assume we can trust the keys
> there.

We assume no such thing. The normal situation is that people are *not*
supposed to touch any keys in UEFI, for all the usual reasons.

                Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/