Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

modsign: change default key details

Change default key details to be more obviously unspecified.

Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: James Morris <james.l.morris@oracle.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

authored by

David Howells and committed by
Linus Torvalds
9c4249c8 9263a06a

+6 -6
+3 -3
Documentation/module-signing.txt
··· 119 119 should be altered from the default: 120 120 121 121 [ req_distinguished_name ] 122 - O = Magrathea 123 - CN = Glacier signing key 124 - emailAddress = slartibartfast@magrathea.h2g2 122 + #O = Unspecified company 123 + CN = Build time autogenerated kernel key 124 + #emailAddress = unspecified.user@unspecified.company 125 125 126 126 The generated RSA key size can also be set with: 127 127
+3 -3
kernel/Makefile
··· 197 197 @echo >>x509.genkey "x509_extensions = myexts" 198 198 @echo >>x509.genkey 199 199 @echo >>x509.genkey "[ req_distinguished_name ]" 200 - @echo >>x509.genkey "O = Magrathea" 201 - @echo >>x509.genkey "CN = Glacier signing key" 202 - @echo >>x509.genkey "emailAddress = slartibartfast@magrathea.h2g2" 200 + @echo >>x509.genkey "#O = Unspecified company" 201 + @echo >>x509.genkey "CN = Build time autogenerated kernel key" 202 + @echo >>x509.genkey "#emailAddress = unspecified.user@unspecified.company" 203 203 @echo >>x509.genkey 204 204 @echo >>x509.genkey "[ myexts ]" 205 205 @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"