4 ms·
It's poor form for the author to quote this out of context. Linus can be abrasive, but this is in response to a patch for adding Secure Boot support in the Linu
by wting 13y ago
It's poor form for the author to quote this out of context. Linus can be abrasive, but this is in response to a patch for adding Secure Boot support in the Linux kernel and thus placing Microsoft in a very powerful position [0]:
Guys, this is not a dick-sucking contest.
If you want to parse PE binaries, go right ahead.
If Red Hat wants to deep-throat Microsoft, that's *your* issue. That
has nothing what-so-ever to do with the kernel I maintain. It's
trivial for you guys to have a signing machine that parses the PE
binary, verifies the signatures, and signs the resulting keys with
your own key. You already wrote the code, for chissake, it's in that
f*cking pull request.
Why should *I* care? Why should the kernel care about some idiotic "we
only sign PE binaries" stupidity? We support X.509, which is the
standard for signing.
Do this in user land on a trusted machine. There is zero excuse for
doing it in the kernel.
Linus
[0]: https://lkml.org/lkml/2013/2/21/228 https://lkml.org/lkml/2013/2/21/228