Luis R. Rodriguez <[email protected]> wrote: > > Though you would still have to be careful with firmware loaded during the > > initramfs phase. > > Make sense, how about: > > --- > The $DIGEST_ALGORITHM needs to be enabled as built-in (=y) or modular > (=m) in the running kernel and can differ from CONFIG_MODULE_SIG_HASH. > If you are enabling the $DIGEST_ALGORITHM as a module take care to > ensure that this module will also be present on the initramfs used as > some modules within the initramfs may need it if using the
Some firmware signatures, not modules. > firmware_class APIs and firmware signing has been enabled. > --- David -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
