Re: [GIT PULL] Load keys from signed PE binaries

Florian Weimer
2013-02-25T14:46:22Z

* Peter Jones:

> I just want to make sure this doesn't go unresponded to - Red Hat
> will not sign kernel modules built by an outside source. We're simply
> not going to sign these kernel modules. That's one of the big reasons
> we want a setup where they can sign their own modules in the first place.

You could just drop the requirement that ring 0 code must be signed.
I don't think Windows 8 enforces this, but I'm not yet sure if there
is a physical presence check before you can enter a mode in which
Windows loads self-signed kernel modules.