On Wed, Mar 6, 2013 at 8:39 PM, Peter Stuge <[email protected]> wrote: > Carlos Silva wrote: > > If one wants to create a key himself, it's also possible to use this > > key, he just has to name it signing_key.priv and siging_key.x509 and > > put it under /usr/src/linux. > > Do you know if this is a sane default? > > Where do most users of signed modules store keys so far? >
It's where the kernel build system picks them. They only have to be there to build the kernel, nothing else. After the kernel is built, and the modules compiled and signed against that keys, they can even be removed from the system.
