Re: [PATCH v2 3/5] ima: update kernel module signing process during build

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH v2 3/5] ima: update kernel module signing process during build
From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
Date: Fri, 19 Feb 2021 10:20:46 -0500
Cc: linux-security-module@xxxxxxxxxxxxxxx, David Howells <dhowells@xxxxxxxxxx>, Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>, Mimi Zohar <zohar@xxxxxxxxxxxxx>, Linux Kernel Mailing List <linux-kernel@xxxxxxxxxxxxxxx>
In-reply-to: <20210218220011.67625-4-nayna@linux.ibm.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.6.0

On 2/18/21 5:00 PM, Nayna Jain wrote:

The kernel build process currently only signs kernel modules when
MODULE_SIG is enabled. Also, sign the kernel modules at build time when
IMA_APPRAISE_MODSIG is enabled.

Signed-off-by: Nayna Jain <nayna@xxxxxxxxxxxxx>


Reviewed-by: Stefan Berger <stefanb@xxxxxxxxxxxxx>

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

References:
- [PATCH v2 0/5] ima: kernel build support for loading the kernel module signing key
  - From: Nayna Jain
- [PATCH v2 3/5] ima: update kernel module signing process during build
  - From: Nayna Jain

Prev by Date: Re: [PATCH v2 2/5] keys: generate self-signed module signing key using CSR
Next by Date: Re: [PATCH v2 4/5] keys: define build time generated ephemeral kernel CA key
Previous by thread: [PATCH v2 3/5] ima: update kernel module signing process during build
Next by thread: [PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux Audio Users] [Yosemite News] [Linux SCSI]

Powered by Linux