Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756182Ab2JTQsI (ORCPT ); Sat, 20 Oct 2012 12:48:08 -0400 Received: from mail-wi0-f172.google.com ([209.85.212.172]:35533 "EHLO mail-wi0-f172.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755009Ab2JTQsG (ORCPT ); Sat, 20 Oct 2012 12:48:06 -0400 MIME-Version: 1.0 In-Reply-To: <874nlpksdr.fsf@silenus.orebokech.com> References: <3179.1350512382@warthog.procyon.org.uk> <87a9vko0z7.fsf@rustcorp.com.au> <20121018121154.GE2934@hansolo.jdub.homelinux.org> <874nlpksdr.fsf@silenus.orebokech.com> From: Linus Torvalds Date: Sat, 20 Oct 2012 09:47:43 -0700 X-Google-Sender-Auth: 89UXH6YGGopdnDtWUGcTqVbEzXI Message-ID: Subject: Re: RFC: sign the modules at install time To: Romain Francoise Cc: Josh Boyer , Rusty Russell , David Howells , David Miller , Linux Kernel Mailing List , pjones@redhat.com Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1092 Lines: 23 On Sat, Oct 20, 2012 at 9:41 AM, Romain Francoise wrote: > > Yes, however the key generation itself is horribly verbose and doesn't mix > very well with the output of a parallel build. Now that the modules are > signed at install time, presumably the key should be generated then as > well, and the output cleaned up to look like normal Kbuild messages (with > support for V=1 for the curious). No, the key needs to be built before the kernel is built, since the public part (for verification) needs to be built into the kernel (and we don't want to make "make install" complicated). Making it less verbose is clearly an option, though. Right now I like seeing it just to see when the key gets recreated and so people are aware of it, but the excitement of that will certainly pall quickly enough ;) Linus -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/