Re: [PATCH v2 3/5] ima: update kernel module signing process during build

From: Stefan Berger
Date: Fri Feb 19 2021 - 10:21:51 EST

Next message: Theodore Ts'o: "Re: [PATCH 1/2] ext4: Handle casefolding with encryption"
Previous message: Stefan Berger: "Re: [PATCH v2 2/5] keys: generate self-signed module signing key using CSR"
In reply to: Nayna Jain: "[PATCH v2 3/5] ima: update kernel module signing process during build"
Next in thread: Nayna Jain: "[PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 2/18/21 5:00 PM, Nayna Jain wrote:

The kernel build process currently only signs kernel modules when
MODULE_SIG is enabled. Also, sign the kernel modules at build time when
IMA_APPRAISE_MODSIG is enabled.

Signed-off-by: Nayna Jain <nayna@xxxxxxxxxxxxx>

Reviewed-by: Stefan Berger <stefanb@xxxxxxxxxxxxx>

Next message: Theodore Ts'o: "Re: [PATCH 1/2] ext4: Handle casefolding with encryption"
Previous message: Stefan Berger: "Re: [PATCH v2 2/5] keys: generate self-signed module signing key using CSR"
In reply to: Nayna Jain: "[PATCH v2 3/5] ima: update kernel module signing process during build"
Next in thread: Nayna Jain: "[PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]