Review & pull request: dracut-modules-olpc
dsd at laptop.org
Mon May 3 10:36:12 EDT 2010
On 30 April 2010 19:39, Martin Langhoff <martin.langhoff at gmail.com> wrote:
> Fair enough. One of the problems is that normally the expiry check is
> done inside bitfrost lib and the code there only respects the system
> So it's a bit messy. Rework bitfrost libs (with impact on users if the
> lib) or implement a bit of code that knows enough about the sig format
> to find out all the expiry dates and picks the lowest one...
> If you really want it, I'll try find the time, though it's... messy.
It seems like a pretty important security hole to me. We should do
this stuff properly.
More information about the Devel