projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fc64b21) | patch
Enforce module signatures if the kernel is locked down
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:32 +0000 (15:11 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Fri, 20 Jul 2018 21:08:27 +0000 (22:08 +0100)
commitc855dfe41ba2707ea52bff505f8d1b5b71f551ff
tree825cf7bc42325a5c56f118886824879242ba6937tree | snapshot
parentfc64b21c1ff337906ec192b54452520d1de30489commit | diff
Enforce module signatures if the kernel is locked down

If the kernel is locked down, require that all modules have valid
signatures that we can verify or that IMA can validate the file.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0004-Enforce-module-signatures-if-the-kernel-is-locked-do.patch
kernel/module.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.