Re: update-initramfs -k all -u
On Fri, May 18, 2007 at 04:41:41PM +0200, Gabor Gombas wrote:
On Fri, May 18, 2007 at 09:12:15AM +0200, martin f krafft wrote:
Good point. Thus it looks like there is no right way [...]
How about making the use of "-k all" configurable?
The point I was trying to make before is that the decision whether "-k
all" is sane or not can only be decided per package (and perhaps even
per revision). For example, a bad cryptsetup binary written to all
available initramfs images means no boot at all. On the other hand, if a
security bug would be found in the cryptsetup initramfs scripts, "-k
all" would be quite necessary.