Re: [PATCH RFC] kernel build: enable use of password-protected signing keys

2014-02-13 Thread Michal Marek
On 2014-02-12 23:41, Emily Maier wrote: > On 02/10/2014 08:51 AM, Michal Marek wrote: >> On 9.2.2014 23:38, Emily Maier wrote: >>> Currently, the module signing script assumes that the private key is >>> not password-protected. This patch makes it slightly more secure by >>> allowing it to be pas

Re: [PATCH RFC] kernel build: enable use of password-protected signing keys

2014-02-10 Thread Michal Marek
On 9.2.2014 23:38, Emily Maier wrote: > Currently, the module signing script assumes that the private key is > not password-protected. This patch makes it slightly more secure by > allowing it to be passed in on the command line as "make > modules_install MOD_PASSWORD=abc". It's vulnerable to sn

[PATCH RFC] kernel build: enable use of password-protected signing keys

2014-02-09 Thread Emily Maier
Currently, the module signing script assumes that the private key is not password-protected. This patch makes it slightly more secure by allowing it to be passed in on the command line as "make modules_install MOD_PASSWORD=abc". It's vulnerable to snooping during the build of course, but so is