Re: [GIT PULL] MODSIGN: Use PKCS#7 for module signatures

From: David Howells
Date: Tue Jul 28 2015 - 05:03:24 EST


Andy Lutomirski <luto@xxxxxxxxxxxxxx> wrote:

> How would it cause kexec problems? I can only see it being a problem
> if Authenticode can't handle authattrs, right? There shouldn't be any
> legacy PKCS7 kexec images whatsoever, because no existing kernel will
> boot them or generate them.

I was wondering if it is possible to get an mscode message that doesn't have
authattrs in it. I guess we can just ignore the possibility until the matter
arises, if it does, and deal with it then as appropriate.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/