[PATCH 0/2] ima: change how MODULE_SIG_FORCE is checked on modules checking policy

This patchset ensure that IMA's modules checking policy: measure func=MODULE_CHECK uid=0 rely on the correct value of CONFIG_MODULE_SIG_FORCE, since the way it is today the code completely ignores the module.sig_enforce cmdline param, which behaves in a OR logic with the CONFIG value

[PATCH 0/2] ima: change how MODULE_SIG_FORCE is checked on modules checking policy

This patchset ensure that IMA's modules checking policy: measure func=MODULE_CHECK uid=0 rely on the correct value of CONFIG_MODULE_SIG_FORCE, since the way it is today the code completely ignores the module.sig_enforce cmdline param, which behaves in a OR logic with the CONFIG value