Re: Fw: signed kernel modules?

From: Rusty Russell (IBM)
Date: Tue Oct 12 2004 - 19:22:06 EST


On Wed, 2004-10-13 at 05:08, Greg KH wrote:
> On Tue, Oct 12, 2004 at 09:35:59AM +0100, David Woodhouse wrote:
> >
> > We know _precisely_ what the kernel looks at -- we wrote its linker. It
> > really isn't that hard.
>
> I agree. We have to be able to detect improper header information for
> unsigned modules today, nothing new there.

No, we *don't*. We check that it's the right arch, and ELF, and not
truncated. Then we trust the contents.

I realize that ignorance is bliss, but if you want to debate this, I
recommend reading some code...

Rusty.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/