By default disallow loading non-signed modules in certified distros

This commit is contained in:
Mikhail Novosyolov 2020-08-06 14:44:29 +03:00
parent b60bba1a6f
commit cc1584c70a

View file

@ -62,7 +62,6 @@
%if %{enhanced_security}
%bcond_without additional_keys
%bcond_with oblig_signed_modules
%endif
# User Mode Linux, https://habr.com/ru/company/itsumma/blog/459558/
%bcond_without uml
@ -73,9 +72,11 @@
%if %{mdvver} == 201900 || %{mdvver} == 201905
%bcond_without nickel
%bcond_without gost_sign
%bcond_without oblig_signed_modules
%else
%bcond_with nickel
%bcond_with gost_sign
%bcond_with oblig_signed_modules
%endif
# Build binary out-of-tree kernel modules (experimental)