Enforce module signatures if the kernel is locked down
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:32 +0000 (15:11 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 18 Aug 2018 12:02:58 +0000 (13:02 +0100)
commit5577a978d745b5e2f5c13fa753a1ff3077a326ff
tree4cf78e455c5aede102255606aff4b2d844167457
parent8f64142cc9d95f9815ecb871e2d3fe3f7020bf99
Enforce module signatures if the kernel is locked down

If the kernel is locked down, require that all modules have valid
signatures that we can verify or that IMA can validate the file.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0004-Enforce-module-signatures-if-the-kernel-is-locked-do.patch
kernel/module.c