diff options
| author | Mimi Zohar <zohar@linux.ibm.com> | 2019-10-30 23:31:34 -0400 |
|---|---|---|
| committer | Michael Ellerman <mpe@ellerman.id.au> | 2019-11-12 12:25:50 +1100 |
| commit | d72ea4915c7e6fa5e7b9022a34df66e375bfe46c (patch) | |
| tree | ede50dc372aaae6c783e2dc43cbfee9c238ddaaf /tools/perf/scripts/python/bin | |
| parent | powerpc/ima: Update ima arch policy to check for blacklist (diff) | |
| download | linux-d72ea4915c7e6fa5e7b9022a34df66e375bfe46c.tar.gz linux-d72ea4915c7e6fa5e7b9022a34df66e375bfe46c.zip | |
powerpc/ima: Indicate kernel modules appended signatures are enforced
The arch specific kernel module policy rule requires kernel modules to
be signed, either as an IMA signature, stored as an xattr, or as an
appended signature. As a result, kernel modules appended signatures
could be enforced without "sig_enforce" being set or reflected in
/sys/module/module/parameters/sig_enforce. This patch sets
"sig_enforce".
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/1572492694-6520-10-git-send-email-zohar@linux.ibm.com
Diffstat (limited to 'tools/perf/scripts/python/bin')
0 files changed, 0 insertions, 0 deletions