Re: [PATCH 1/4] firmware: add firmware signing

2017-05-30 Thread Alan Cox
On Fri, 2017-05-26 at 12:06 +0900, AKASHI Takahiro wrote: > There is one driver data option, DRIVER_DATA_REQ_NO_SIG_CHECK, > which will skip signature verification check at load time > even in enforcing mode. > This option is solely for non security-sensitive data. It's also for firmware that is

Re: [PATCH 1/4] firmware: add firmware signing

2017-05-30 Thread Alan Cox
On Fri, 2017-05-26 at 12:06 +0900, AKASHI Takahiro wrote: > There is one driver data option, DRIVER_DATA_REQ_NO_SIG_CHECK, > which will skip signature verification check at load time > even in enforcing mode. > This option is solely for non security-sensitive data. It's also for firmware that is

[PATCH 1/4] firmware: add firmware signing

2017-05-25 Thread AKASHI Takahiro
Systems that have module signing currently enabled may wish to extend vetting of firmware passed to the kernel as well. We can re-use most of the code for module signing for firmware signature verification and signing. This will also later enable re-use of this same code for subsystems that wish

[PATCH 1/4] firmware: add firmware signing

2017-05-25 Thread AKASHI Takahiro
Systems that have module signing currently enabled may wish to extend vetting of firmware passed to the kernel as well. We can re-use most of the code for module signing for firmware signature verification and signing. This will also later enable re-use of this same code for subsystems that wish