projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cbdbaca) | patch
Enforce module signatures if the kernel is locked down
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:32 +0000 (15:11 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 27 May 2018 12:05:03 +0000 (13:05 +0100)
commit90e1040bbb4321ec26e27a395d3b1412d097c9db
tree3368c945455ad7baea955984f5ee34659cdfbc51tree | snapshot
parentcbdbaca11b7d2cefbbab45c68f6fdda863f22d73commit | diff
Enforce module signatures if the kernel is locked down

If the kernel is locked down, require that all modules have valid
signatures that we can verify or that IMA can validate the file.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0004-Enforce-module-signatures-if-the-kernel-is-locked-do.patch
kernel/module.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.