[lkml]   [2017]   [Nov]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Firmware signing -- Re: [PATCH 00/27] security, efi: Add kernel lockdown
On Tue, Nov 14, 2017 at 4:21 AM, Mimi Zohar <> wrote:
> On Mon, 2017-11-13 at 14:09 -0800, Linus Torvalds wrote:
>> Seriously, if you have firmware in /lib/firmware, and you don't trust
>> it, what the hell are you doing?
> I might "trust" the files in /lib/firmware, but I also want to make
> sure that they haven't changed. File signatures provide file
> provenance and integrity guarantees.

Sure. But that has absolutely nothing to do with "firmware".

It is equally true of /usr/bin/* and pretty much everything in the system.

It's this insane "firmware is special" that I disagree with. It's not
special at all.


 \ /
  Last update: 2017-11-14 18:34    [W:0.152 / U:1.384 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site