[lkml]   [2017]   [Nov]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectFirmware signing -- Re: [PATCH 00/27] security, efi: Add kernel lockdown
Mimi Zohar <> wrote:

> > Only validly signed device firmware may be loaded.
> fw_get_filesystem_firmware() calls kernel_read_file_from_path() to
> read the firmware, which calls into the security hooks. Is there
> another place that validates the firmware signatures.  I'm not seeing
> which patch requires firmware to be signed?

Luis has a set of patches for this. However, I'm not sure if that's going
anywhere at the moment. Possibly I should remove this from the manpage for
the moment.


 \ /
  Last update: 2017-11-02 23:04    [W:0.692 / U:0.596 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site