User: Password:
Subscribe / Log in / New account

KS2012: Module signing

KS2012: Module signing

Posted Sep 11, 2012 13:21 UTC (Tue) by njwhite (guest, #51848)
In reply to: KS2012: Module signing by hmh
Parent article: KS2012: Module signing

> One should be able to tell the kernel that the nVidia key can only sign the nVidia module, and to refuse anything else it signed...

Couldn't a compromised / hostile nVidia just creat a module that was called nvidia.ko, but did *bad thing*? Presumably one can't specify the allowed interfaces a module may use in advance.

Or am I misunderstanding you?

(Log in to post comments)

KS2012: Module signing

Posted Sep 14, 2012 23:19 UTC (Fri) by dashesy (guest, #74652) [Link]

nVidia already signs its kernels for other OS, so what is the harm in asking them also sign the Linux version.

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds