Re: RFC: sign the modules at install time

From: Rusty Russell
Date: Thu Oct 18 2012 - 00:42:25 EST


Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> writes:
> Ta-daa, you have your debuginfo modules installed, and they are
> signed. Create the debuginfo rpm.
>
> - now, strip the modules. This obviously destroys the signatures

Note this doesn't remove them. You'll need something like:

dd if=$k of=$k.nosig bs=$(grep -cba $k '~Module signature appended~' | cut -d: -f1) count=1 && mv $k.nosig $k

Cheers,
Rusty.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/