Djam/kernel-5.10
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/kernel-5.10.git synced 2025-02-25 09:42:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix patch description

Browse source
This commit is contained in:
Mikhail Novosyolov 2020-08-10 10:47:03 +03:00
parent 8961886c24
commit 48548b3dfd
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
0001-ROSA-ima-allow-to-off-modules-signature-check-dynami.patch
View file

@ -4,13 +4,12 @@ Date: Mon, 10 Aug 2020 10:38:20 +0300
Subject: [PATCH] ROSA: ima: allow to off modules signature check dynamically Subject: [PATCH] ROSA: ima: allow to off modules signature check dynamically
Allow module.sig_enforce=0 kernel cmdline, not only module.sig_enforce=1 Allow module.sig_enforce=0 kernel cmdline, not only module.sig_enforce=1
It allows to keep CONFIG_MODULE_SIG_FORCE=y, but disable it when really needed. It allows to keep CONFIG_MODULE_SIG_FORCE=y, but disable it when really needed
without recompiling the kernel (it may be impossible, e.g. in certified systems).
GRUB or another bootloader is password-protected when needed, GRUB or another bootloader is password-protected when needed,
so I am not afraid much that someone will be able to turn it off when not needed. so I am not afraid much that someone will be able to turn it off when not needed.
in production systems.
ROSA-specific patch. ROSA-specific patch.
Signed-off-by: Mikhail Novosyolov <m.novosyolov@rosalinux.ru> Signed-off-by: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>