| commit | 1d0059f3a468825b5fc5405c636a2f6e02707ffa | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Wed Sep 26 10:09:50 2012 +0100 |
| committer | Rusty Russell <rusty@rustcorp.com.au> | Wed Oct 10 20:01:19 2012 +1030 |
| tree | 0eef1243a093410f39564051d8904c8041e1e717 | |
| parent | 106a4ee258d14818467829bf0e12aeae14c16cd7 [diff] |
MODSIGN: Add FIPS policy If we're in FIPS mode, we should panic if we fail to verify the signature on a module or we're asked to load an unsigned module in signature enforcing mode. Possibly FIPS mode should automatically enable enforcing mode. Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>