]> git.karo-electronics.de Git - karo-tx-linux.git/commit
MODSIGN: Add FIPS policy
authorDavid Howells <dhowells@redhat.com>
Wed, 26 Sep 2012 09:09:50 +0000 (10:09 +0100)
committerRusty Russell <rusty@rustcorp.com.au>
Fri, 28 Sep 2012 05:14:58 +0000 (14:44 +0930)
commit3d7859561f45fe3e9302b21493c30f5c1d961e9d
tree1ec4920b75ec81c66742ded86350cc84880b5a09
parente4f46e94bd71c5db2c24ea89b42355c7ab0e0e01
MODSIGN: Add FIPS policy

If we're in FIPS mode, we should panic if we fail to verify the signature on a
module or we're asked to load an unsigned module in signature enforcing mode.
Possibly FIPS mode should automatically enable enforcing mode.

Signed-off-by: David Howells <dhowells@redhat.com>
kernel/module.c