Bandie/grub2-signing-extension

Unsafe Disposal of Digital Signatures

Closed this issue · 2 comments

The grub-unsign command uses rm to dispose of outdated digital signatures. This is not a good practice for signatures that should not be used anymore. The shred --remove=unlink command might be better suited to dispose of the signatures.

A small problem with the shred command is that it uses the disk more than rm.

Hey, I agree with that idea. I'll throw it in.

Fixed in c7b049c