DKMS already supports signed kernel modules. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		charcircuit on March 11, 2024 \| parent \| context \| favorite \| on: Kernel Hardening: Protect Linux user accounts agai... DKMS already supports signed kernel modules.

josephcsible on March 11, 2024 [–]

It supports them by creating its own private key and signing them on your system. That's inherently incompatible with only trusting modules from your distro vendor.

charcircuit on March 12, 2024 | [–]

You are right only the distro's build servers would be able to use DKMS as the distro couldn't ship the private key.

josephcsible on March 12, 2024 | | [–]

That's fundamentally not how DKMS works.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact