| |||||||||||||
KS2012: Module signingKS2012: Module signingPosted Sep 11, 2012 13:21 UTC (Tue) by njwhite (subscriber, #51848)In reply to: KS2012: Module signing by hmh Parent article: KS2012: Module signing
> One should be able to tell the kernel that the nVidia key can only sign the nVidia module, and to refuse anything else it signed...
Couldn't a compromised / hostile nVidia just creat a module that was called nvidia.ko, but did *bad thing*? Presumably one can't specify the allowed interfaces a module may use in advance.
Or am I misunderstanding you?
(Log in to post comments)
KS2012: Module signing Posted Sep 14, 2012 23:19 UTC (Fri) by dashesy (subscriber, #74652) [Link]
nVidia already signs its kernels for other OS, so what is the harm in asking them also sign the Linux version.
|
|||||||||||||