On Wed, Aug 04, 2021 at 08:40:01AM -0400, Stefan Berger wrote: > > On 8/4/21 7:19 AM, Daniel Kiper wrote: > > CC-ing Patrick. > > > > On Fri, Jul 30, 2021 at 11:45:38AM -0400, Stefan Berger wrote: > >> From: Daniel Axtens > >> > >> On powerpc-ieee1275, we are running out of memory trying to verify > >> anything. This is because: > >> > >> - we have to load an entire file into memory to verify it. This is > >> extremely difficult to change with appended signatures. > >> - We only have 32MB of heap. > >> - Distro kernels are now often around 30MB. > >> > >> So we want to claim more memory from OpenFirmware for our heap. > > Stefan, Patrick, Daniel, may I ask one of you to work on the [1] > > proposal. I want to have this solution implemented. > > Is the design in [1] correct just that the patches need forward-porting? > >   Stefan Honestly, I don't quite recall the state back when I was working on it. Forward-porting the patch set is trivial to do, there aren't really any conflicts. I may try to invest some time into it tomorrow to see whether it did work as advertised. Patrick