Tracing unsigned modules

Posted Mar 8, 2014 13:54 UTC (Sat) by nevets (subscriber, #11875)
In reply to: Tracing unsigned modules by rusty
Parent article: Tracing unsigned modules

> Sign all modules during make modules_install. Without this option, modules must be signed manually, using the scripts/sign-file tool.

That doesn't say: "Or your unsigned modules will not work as expected"

I think your "you broke it, you get to keep both pieces" is quite off.

I mean really. WTF does not signing a module have to do with breaking other parts of the kernel. That help message to me just says that I need to sign my module manually if I want it part of the "trusted" group. It doesn't say that parts of the module will not work because it wasn't signed.

Even if someone read that, it doesn't convey, HEY SIGN YOUR MODULE, OR WHEN YOU LOAD IT YOU WILL BE TOTALLY FSCKED AND WE WONT EVEN TELL YOU SOMETHING WENT BAD.

Tracing unsigned modules

Posted Mar 9, 2014 0:07 UTC (Sun) by rusty (guest, #26) [Link] (2 responses)

I can see this is personally offensive for you, so I'll stop responding so that you have time to heal.

Cheers,
Rusty.

Tracing unsigned modules

Posted Mar 9, 2014 14:07 UTC (Sun) by nevets (subscriber, #11875) [Link] (1 responses)

No this isn't personally offensive to me. I just like my CAPS LOCK key. Believe me, as many people who know me, it takes a hell of a lot to offend me :-)

I'm just trying to point out (perhaps loudly) that it's not broken. It's a valid config that you said "hey you broke it, you keep the pieces". Where the config is just talking about the signing of modules. No where does it say that the module will not work as expected because of it.

Tracing unsigned modules

Posted Mar 9, 2014 21:42 UTC (Sun) by dlang (guest, #313) [Link]

the modules work, it's just tracing that is blocked. And I think that blocking tracing because it _may_ cause problems is a bad idea, warn that it may be a problem and get confirmation from the admin, possibly, but then allow it because it's no more likely to break the system than loading the tainted module was.