Re: [PATCH 21/21] MODSIGN: Apply signature checking to modules on module load [ver #3]

2011-12-10 Thread Rusty Russell
On Sat, 10 Dec 2011 14:08:34 +, David Howells wrote: > Rusty Russell wrote: > > > > > Sure, you now need to re-append that after stripping, but that's not the > > > > kernel's problem. > > > > > > You may also have to remove the signature before passing it to any > > > binutils tool lest it

Re: [PATCH 21/21] MODSIGN: Apply signature checking to modules on module load [ver #3]

2011-12-10 Thread Rusty Russell
On Sat, 10 Dec 2011 10:37:23 -0800, Arjan van de Ven wrote: > > > > Yes, there may be more than stripped and unstripped. You may need to > > do fancy things. But now, adding a signature is so easy that it's > > not a real problem. And we can always have a hook, like: > > > > if VARIA

Re: [PATCH 21/21] MODSIGN: Apply signature checking to modules on module load [ver #3]

2011-12-10 Thread Arjan van de Ven
> > Yes, there may be more than stripped and unstripped. You may need to > do fancy things. But now, adding a signature is so easy that it's > not a real problem. And we can always have a hook, like: > > if VARIANTS=`make-module-variants $MOD`; then > for m in $VARIANTS

Re: [PATCH 21/21] MODSIGN: Apply signature checking to modules on module load [ver #3]

2011-12-10 Thread David Howells
Rusty Russell wrote: > > > Sure, you now need to re-append that after stripping, but that's not the > > > kernel's problem. > > > > You may also have to remove the signature before passing it to any > > binutils tool lest it malfunction on the trailer > > Well, you're already on your own if you