On 4/1/21 7:59 AM, Michael Olbrich wrote:
> On Wed, Mar 31, 2021 at 11:37:11AM +0000, Denis Osterland-Heim wrote:
>> If CONFIG_MODULE_SIG_ALL is set in kernelconfig then modules will be
>> automatically signed during the modules_install phase of a kernel build.
>>
>> Signed modules are BRITTLE as the signature is outside of the defined ELF
>> container. Thus they MAY NOT be stripped once the signature is computed
>> and attached. Note the entire module is the signed payload, including any
>> and all debug information present at the time of signing.
>>
>> See: https://www.kernel.org/doc/html/latest/admin-guide/module-signing.html
>> Signed-off-by: Denis Osterland-Heim <[email protected]>
>> ---
>> v2 -> v3:
>>  - move TARGET_COMPILER_RECORD_SWITCHES to PTXDIST_LOWLEVEL_WRAPPER_BLACKLIST
> 
> Marc, what do you think?

lgtm

Marc

-- 
Pengutronix e.K.                 | Marc Kleine-Budde           |
Embedded Linux                   | https://www.pengutronix.de  |
Vertretung West/Dortmund         | Phone: +49-231-2826-924     |
Amtsgericht Hildesheim, HRA 2686 | Fax:   +49-5121-206917-5555 |

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
ptxdist mailing list
[email protected]
To unsubscribe, send a mail with subject "unsubscribe" to 
[email protected]

Reply via email to