Re: [PATCH v2 3/5] ima: update kernel module signing process during build

From: Stefan Berger <stefanb@linux.ibm.com>
Date: 2021-02-19 15:21:52
Also in: keyrings, linux-integrity, lkml
Reply to: Nayna Jain, 2021-02-18

On 2/18/21 5:00 PM, Nayna Jain wrote:

The kernel build process currently only signs kernel modules when
MODULE_SIG is enabled. Also, sign the kernel modules at build time when
IMA_APPRAISE_MODSIG is enabled.

Signed-off-by: Nayna Jain <nayna@linux.ibm.com>

Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>

Nayna Jain · 2021-02-18
[PATCH v2 1/5] keys: cleanup build time module signing keys · Nayna Jain · 2021-02-18
Re: [PATCH v2 1/5] keys: cleanup build time module signing keys · Stefan Berger · 2021-02-19
[PATCH v2 2/5] keys: generate self-signed module signing key using CSR · Nayna Jain · 2021-02-18
Re: [PATCH v2 2/5] keys: generate self-signed module signing key using CSR · Stefan Berger · 2021-02-19
[PATCH v2 3/5] ima: update kernel module signing process during build · Nayna Jain · 2021-02-18
Re: [PATCH v2 3/5] ima: update kernel module signing process during build · Stefan Berger · 2021-02-19
[PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring · Nayna Jain · 2021-02-18
Re: [PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring · Mimi Zohar · 2021-02-18
Re: [PATCH v2 5/5] ima: enable loading of build time generated key on .ima keyring · Stefan Berger · 2021-02-19
[PATCH v2 4/5] keys: define build time generated ephemeral kernel CA key · Nayna Jain · 2021-02-18
Re: [PATCH v2 4/5] keys: define build time generated ephemeral kernel CA key · Stefan Berger · 2021-02-19
View all 12 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help