Re: kexec_load(2) bypasses signature verification

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Vivek Goyal <vgoyal@redhat.com>
Newsgroups	linux.kernel
Subject	Re: kexec_load(2) bypasses signature verification
Date	Fri, 19 Jun 2015 15:10:02 +0200
Message-ID	<pD4ds-8gO-17@gated-at.bofh.it> (permalink)
References	<pBIRI-5m8-3@gated-at.bofh.it> <pC51T-3OF-9@gated-at.bofh.it> <pC5EC-4Oe-19@gated-at.bofh.it> <pCauC-3iI-13@gated-at.bofh.it> <pCaEi-3ui-7@gated-at.bofh.it> <pCwEN-1MB-1@gated-at.bofh.it> <pCxrb-2YR-7@gated-at.bofh.it> <pCIcV-1t5-19@gated-at.bofh.it> <pCXYl-7Dj-7@gated-at.bofh.it> <pCZGN-1Jh-13@gated-at.bofh.it>
X-Original-To	Dave Young <dyoung@redhat.com>
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
User-Agent	Mutt/1.5.23 (2014-03-12)
X-Scanned-By	MIMEDefang 2.68 on 10.5.11.22
Sender	robomod@news.nic.it
List-ID	<linux-kernel.vger.kernel.org>
X-Mailing-List	linux-kernel@vger.kernel.org
Approved	robomod@news.nic.it
Lines	16
Organization	linux.* mail to news gateway
X-Original-Cc	"Eric W. Biederman" <ebiederm@xmission.com>, Josh Boyer <jwboyer@fedoraproject.org>, "Theodore Ts'o" <tytso@mit.edu>, Petr Tesarik <ptesarik@suse.cz>, kexec <kexec@lists.infradead.org>, "Linux-Kernel@Vger. Kernel. Org" <linux-kernel@vger.kernel.org>, David Howells <dhowells@redhat.com>
X-Original-Date	Fri, 19 Jun 2015 09:09:33 -0400
X-Original-Message-ID	<20150619130933.GB13714@redhat.com>
X-Original-References	<20150615200115.GG5003@thunk.org> <87zj3zigug.fsf@x220.int.ebiederm.org> <20150616202757.GB14943@redhat.com> <87y4jjglvu.fsf@x220.int.ebiederm.org> <20150617014737.GB30214@redhat.com> <20150618011629.GA8718@dhcp-128-32.nay.redhat.com> <20150618020209.GA8390@dhcp-128-32.nay.redhat.com> <20150618133044.GA1040@redhat.com> <20150619062140.GH4636@dhcp-128-32.nay.redhat.com> <20150619081816.GK4636@dhcp-128-32.nay.redhat.com>
X-Original-Sender	linux-kernel-owner@vger.kernel.org
Xref	aioe.org linux.kernel:1168764

Show key headers only | View raw

On Fri, Jun 19, 2015 at 04:18:16PM +0800, Dave Young wrote:
> > > If we want to disable unsigned kernel loading at compile time, then we
> > > really need to work on decoupling CONFIG_KEXEC and CONFIG_FILE_KEXEC.
> > > Introducing another config option is not the way forward, IMHO.
> > 
> > Yes, let's do it in this way since everyone is fine with it.
> 
> I will work on a patch if nobody else have interest or no time on it.

Thanks Dave. Will be good if you can get this done.

Thanks
Vivek
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
Please read the FAQ at  http://www.tux.org/lkml/

Thread

kexec_load(2) bypasses signature verification Theodore Ts'o <tytso@mit.edu> - 2015-06-15 06:00 +0200
  Re: kexec_load(2) bypasses signature verification Theodore Ts'o <tytso@mit.edu> - 2015-06-15 22:10 +0200
    Re: kexec_load(2) bypasses signature verification ebiederm@xmission.com (Eric W. Biederman) - 2015-06-16 21:50 +0200
      Re: kexec_load(2) bypasses signature verification Vivek Goyal <vgoyal@redhat.com> - 2015-06-16 22:30 +0200
        Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-18 03:20 +0200
          Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-18 04:10 +0200
            Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-19 08:30 +0200
              Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-19 10:20 +0200
                Re: kexec_load(2) bypasses signature verification Vivek Goyal <vgoyal@redhat.com> - 2015-06-19 15:10 +0200
        Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-19 09:10 +0200
          Re: kexec_load(2) bypasses signature verification Vivek Goyal <vgoyal@redhat.com> - 2015-06-19 15:10 +0200
    Re: kexec_load(2) bypasses signature verification Dave Young <dyoung@redhat.com> - 2015-06-18 03:30 +0200

csiph-web