Enforce module signatures if the kernel is locked down
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:32 +0000 (15:11 +0000)
committerRaspbian forward porter <root@raspbian.org>
Sat, 5 May 2018 11:51:50 +0000 (12:51 +0100)
commitf133d021b23ce5c42831428dd387624305885e42
treef474fd8e5bf7c7923e84c4cfb2b76b19b1421b0a
parent17fee097357f1e6d8878d45e17b23844cbee8199
Enforce module signatures if the kernel is locked down

If the kernel is locked down, require that all modules have valid
signatures that we can verify or that IMA can validate the file.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0004-Enforce-module-signatures-if-the-kernel-is-locked-do.patch
kernel/module.c