By default disallow loading non-signed modules in certified distros

This commit is contained in:
Mikhail Novosyolov 2020-08-06 14:44:29 +03:00
parent b60bba1a6f
commit cc1584c70a

View file

@ -62,7 +62,6 @@
%if %{enhanced_security} %if %{enhanced_security}
%bcond_without additional_keys %bcond_without additional_keys
%bcond_with oblig_signed_modules
%endif %endif
# User Mode Linux, https://habr.com/ru/company/itsumma/blog/459558/ # User Mode Linux, https://habr.com/ru/company/itsumma/blog/459558/
%bcond_without uml %bcond_without uml
@ -73,9 +72,11 @@
%if %{mdvver} == 201900 || %{mdvver} == 201905 %if %{mdvver} == 201900 || %{mdvver} == 201905
%bcond_without nickel %bcond_without nickel
%bcond_without gost_sign %bcond_without gost_sign
%bcond_without oblig_signed_modules
%else %else
%bcond_with nickel %bcond_with nickel
%bcond_with gost_sign %bcond_with gost_sign
%bcond_with oblig_signed_modules
%endif %endif
# Build binary out-of-tree kernel modules (experimental) # Build binary out-of-tree kernel modules (experimental)