[PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency
COLD58d
REVIEWED: 7 (7M)
From: Thomas Weißschuh <linux@weissschuh.net>
Date: 2026-05-05 09:05:36
Also in:
bpf, linux-arch, linux-doc, linux-integrity, linux-kbuild, linux-security-module, linuxppc-dev, lkml
Subsystem:
lockdown security module, security subsystem, the rest · Maintainers:
Nicolas Bouchinet, Xiu Jianfeng, Paul Moore, James Morris, "Serge E. Hallyn", Linus Torvalds
2 review trailers (1 from subsystem maintainers).
The new hash-based module integrity checking will also be able to satisfy the requirements of lockdown. Such an alternative is not representable with "select", so use "depends on" instead. Acked-by: Paul Moore <paul@paul-moore.com> Reviewed-by: Nicolas Schier <nsc@kernel.org> Signed-off-by: Thomas Weißschuh <linux@weissschuh.net> --- security/lockdown/Kconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/security/lockdown/Kconfig b/security/lockdown/Kconfig
index e84ddf484010..155959205b8e 100644
--- a/security/lockdown/Kconfig
+++ b/security/lockdown/Kconfig@@ -1,7 +1,7 @@ config SECURITY_LOCKDOWN_LSM bool "Basic module for enforcing kernel lockdown" depends on SECURITY - select MODULE_SIG if MODULES + depends on !MODULES || MODULE_SIG help Build support for an LSM that enforces a coarse kernel lockdown behaviour.
--
2.54.0