MODSIGN: Export module signature definitions
IMA will use the module_signature format for append signatures, so export the relevant definitions and factor out the code which verifies that the appended signature trailer is valid. Also, create a CONFIG_MODULE_SIG_FORMAT option so that IMA can select it and be able to use mod_check_sig() without having to depend on either CONFIG_MODULE_SIG or CONFIG_MODULES. s390 duplicated the definition of struct module_signature so now they can use the new <linux/module_signature.h> header instead. Signed-off-by:Thiago Jung Bauermann <bauerman@linux.ibm.com> Acked-by:
Jessica Yu <jeyu@kernel.org> Reviewed-by:
Philipp Rudo <prudo@linux.ibm.com> Cc: Heiko Carstens <heiko.carstens@de.ibm.com> Signed-off-by:
Mimi Zohar <zohar@linux.ibm.com>
Showing
- arch/s390/Kconfig 1 addition, 1 deletionarch/s390/Kconfig
- arch/s390/kernel/machine_kexec_file.c 1 addition, 23 deletionsarch/s390/kernel/machine_kexec_file.c
- include/linux/module.h 0 additions, 3 deletionsinclude/linux/module.h
- include/linux/module_signature.h 44 additions, 0 deletionsinclude/linux/module_signature.h
- init/Kconfig 5 additions, 1 deletioninit/Kconfig
- kernel/Makefile 1 addition, 0 deletionskernel/Makefile
- kernel/module.c 1 addition, 0 deletionskernel/module.c
- kernel/module_signature.c 46 additions, 0 deletionskernel/module_signature.c
- kernel/module_signing.c 8 additions, 48 deletionskernel/module_signing.c
- scripts/Makefile 1 addition, 1 deletionscripts/Makefile
Loading
Please register or sign in to comment