On Mon, 24 Aug 2015, Akshat Kakkar wrote:
> The o/p of strace -f make modules_install is attached as it is very big.
You should have sent such a huge file privately to me only, instead of
the whole mailing list...
Searching the log for "key":
[pid 31645] execve("/bin/perl", ["perl",
"/usr/src/kernels/3.10.0-229.11.1"..., "sha256", "./signing_key.priv",
"./signing_key.x509", "/lib/modules/3.10.0-229.11.1.el7"...], [/* 103 vars
*/]) = 0
So apparently SL 7 wants to sign the kernel modules. However it doesn't
work because the required private and public key files are assumed to be
in the working directory.
I don't have RedHat based systems. Read
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sect-signing-kernel-modules-for-secure-boot.html
and decide that you need signed kernel modules or not, and if yes, then
where your key files are located. Then possibly symlinking them into the
ipset source directory is enough for a successful, signed module
installation.
Best regards,
Jozsef
-
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
