]> git.baikalelectronics.ru Git - kernel.git/commit
MODSIGN: Add FIPS policy
authorDavid Howells <dhowells@redhat.com>
Wed, 26 Sep 2012 09:09:50 +0000 (10:09 +0100)
committerRusty Russell <rusty@rustcorp.com.au>
Wed, 10 Oct 2012 09:31:19 +0000 (20:01 +1030)
commit7a4bedbfb90a4a086235e08c1d6ad1506c6e7fc3
tree0eef1243a093410f39564051d8904c8041e1e717
parenta656e090709264f892b990e2631a9cabec084f00
MODSIGN: Add FIPS policy

If we're in FIPS mode, we should panic if we fail to verify the signature on a
module or we're asked to load an unsigned module in signature enforcing mode.
Possibly FIPS mode should automatically enable enforcing mode.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
kernel/module.c