[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: update-initramfs -k all -u

On Fri, May 18, 2007 at 04:41:41PM +0200, Gabor Gombas wrote:
On Fri, May 18, 2007 at 09:12:15AM +0200, martin f krafft wrote:

Good point. Thus it looks like there is no right way [...]

How about making the use of "-k all" configurable?

The point I was trying to make before is that the decision whether "-k all" is sane or not can only be decided per package (and perhaps even per revision). For example, a bad cryptsetup binary written to all available initramfs images means no boot at all. On the other hand, if a security bug would be found in the cryptsetup initramfs scripts, "-k all" would be quite necessary.

David Härdeman

Reply to: