Re: [PATCH] MODSIGN: Discard previous signature when signing modules

[David Howells]

Michal Marek <mmarek@xxxxxxx> wrote:

> The format only supports one signature, so discard any previous
> signature before signing the module.

That's not totally true.  The format does not preclude multiple signatures.
You can just add another signature block on the end that signs everything
inside of that, including all previous signatures.  The alteration to the code
to check all of them would be very small, I think.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/