From: Ben Hutchings <ben@decadent.org.uk>
Date: Sat, 10 Aug 2013 15:36:03 +0000 (+0200)
Subject: Describe module signing and relationship to Secure Boot
X-Git-Tag: debconf2013~10
X-Git-Url: https://git.decadent.org.uk/gitweb/?a=commitdiff_plain;h=b327656faff079f122b1b243f482f208a2be3e8b;p=kernel-news-talk.git

Describe module signing and relationship to Secure Boot
---

diff --git a/index.html b/index.html
index 9d3e258..0713e46 100644
--- a/index.html
+++ b/index.html
@@ -165,6 +165,24 @@
   </ul>
 </div>
 
+<div class="slide">
+  <h1>Module signing [3.7]</h1>
+  <ul class="incremental">
+    <li>
+      Kernel modules can be signed at build time, and the kernel
+      configured to refuse loading unsigned modules
+    </li>
+    <li>
+      Necessary but not sufficient to implement Secure Boot -
+      we would also need signed kernel images and some other
+      restrictions when booted in this mode
+    </li>
+    <li>
+      Want to make Secure Boot work?  Come to the meeting on Tuesday
+    </li>
+  </ul>
+</div>
+
 <div class="slide">
   <h1>Questions?</h1>
 </div>