Review & pull request: dracut-modules-olpc

Daniel Drake dsd at
Mon May 3 10:36:12 EDT 2010

On 30 April 2010 19:39, Martin Langhoff <martin.langhoff at> wrote:
> Fair enough. One of the problems is that normally the expiry check is
> done inside bitfrost lib and the code there only respects the system
> clock.
> So it's a bit messy. Rework bitfrost libs (with impact on users if the
> lib) or implement a bit of code that knows enough about the sig format
> to find out all the expiry dates and picks the lowest one...
> If you really want it, I'll try find the time, though it's... messy.

It seems like a pretty important security hole to me. We should do
this stuff properly.


More information about the Devel mailing list