Re: Should we automatically generate a module signing key at all?

[David Howells <dhowells@redhat.com>]

Andy Lutomirski <luto@amacapital.net> wrote:

> Alternatively, we could eventually support some way of verifying a
> hash or signature on each tuple (path, mode, contents)

Since the initramfs is composed on the system being installed according to the
hardware on that machine, you have to expose this list to meddling during
composition whether you sign it (you need a private key) or hash it (what do
you do with the hash once you've produced it?).

David