Package: kernel-package
Version: 12.036+nmu3
Severity: important
/usr/share/kernel-package/ruleset/targets/image.mk does this:
find $(TMPTOP)$(DEBUGDIR) -type f -name \*.ko | \
while read file; do
origfile=`echo $$file | sed -e 's,$(DEBUGDIR),,g'`;
echo $(OBJCOPY) --only-keep-debug $$file;
$(OBJCOPY) --only-keep-debug $$file;
echo $(OBJCOPY) --add-gnu-debuglink=$$file $$origfile;
$(OBJCOPY) --add-gnu-debuglink=$$file $$origfile;
done
which corrupts module signatures.
Module signatures are important, there are several rootkits that are
neutralized when the kernel refuses to load unsigned modules.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
