Proposal for a design for signed kernel/modules/etc

[Eric McCorkle]

On 03/29/2017 23:25, Konstantin Belousov wrote:

> First, you mix or do not understand a difference between section and segment.
> Second, this scheme allows to add loadable segments after signing.
> Third, most important, it has zero chances of working for amd64 modules.

That design has been abandoned in later discussions.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20170329/66e7fbcd/attachment.sig>