Re: [PATCH] MODSIGN: Change default key details

From: James Morris
Date: Thu Feb 19 2015 - 19:50:00 EST


On Mon, 16 Feb 2015, David Howells wrote:

> Change default key details to be more obviously unspecified.
>
> Reported-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
> Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
> ---
>
> kernel/Makefile | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/kernel/Makefile b/kernel/Makefile
> index 1408b3353a3c..11efbfa542a9 100644
> --- a/kernel/Makefile
> +++ b/kernel/Makefile
> @@ -195,9 +195,9 @@ x509.genkey:
> @echo >>x509.genkey "x509_extensions = myexts"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ req_distinguished_name ]"
> - @echo >>x509.genkey "O = Magrathea"
> - @echo >>x509.genkey "CN = Glacier signing key"
> - @echo >>x509.genkey "emailAddress = slartibartfast@xxxxxxxxxxxxxx"
> + @echo >>x509.genkey "#O = Unspecified company"
> + @echo >>x509.genkey "CN = Build time autogenerated kernel key"
> + @echo >>x509.genkey "#emailAddress = unspecified.user@xxxxxxxxxxxxxxxxxxx"
> @echo >>x509.genkey
> @echo >>x509.genkey "[ myexts ]"
> @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"

Acked-by: James Morris <james.l.morris@xxxxxxxxxx>


--
James Morris
<jmorris@xxxxxxxxx>

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/