From f4867fbcaaa404daf7a1ca84f51cc6eabe0b5db2 Mon Sep 17 00:00:00 2001 From: Mikhail Novosyolov Date: Fri, 27 Nov 2020 01:34:07 +0300 Subject: [PATCH] Enable GOST signatures of kernel modules on rosa2019.1, they work now well --- kernel.spec | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/kernel.spec b/kernel.spec index 9418732..7e5df93 100644 --- a/kernel.spec +++ b/kernel.spec @@ -24,7 +24,7 @@ %define sublevel 80 # Release number. Increase this before a rebuild. -%define rpmrel 2 +%define rpmrel 3 %define fullrpmrel %{rpmrel} %define rpmtag %{disttag} @@ -76,23 +76,23 @@ %endif # "Nickel" is a special brand for certified distros -# gost_sign will probably be enabled outside of Nickel later, -# but for now let's better do not make such experiments in stable platforms %if %{mdvver} == 201900 || %{mdvver} == 201905 %bcond_without nickel -%bcond_without gost_sign +# Require kernel modules to be signed %bcond_without oblig_signed_modules %else %bcond_with nickel -%bcond_with gost_sign %bcond_with oblig_signed_modules %endif -# Build binary out-of-tree kernel modules (experimental) %if %{mdvver} >= 201905 +# Build binary out-of-tree kernel modules (experimental) %bcond_without binary_extra_modules +# Sign kernel modules with GOST key (experimental) +%bcond_without gost_sign %else %bcond_with binary_extra_modules +%bcond_with gost_sign %endif %bcond_with ccache