[DistroKit] [PATCH 2/3] mips: kernel: properly handle signed modules

[Roland Hieber <rhi@pengutronix.de>]

This ports the following commits from PTXdist 2021.04.0:

    | commit a22b449946eed634f42b06b0c385b29621c6d02e
    | Author: Michael Olbrich <m.olbrich@pengutronix.de>
    | Date:   2021-04-01 15:58:54
    |
    |     template: kernel: proper handle signed modules
    |
    |     Same as 565aabf6f36d3ed31544d882394604c4a1b13597 but for the kernel
    |     template instead of the kernel itself.
    |
    |     Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
    |
    | commit 565aabf6f36d3ed31544d882394604c4a1b13597
    | Author: Denis Osterland-Heim <denis.osterland@diehl.com>
    | Date:   2021-03-31 13:35:25
    |
    |     kernel: proper handle signed modules
    |
    |     If CONFIG_MODULE_SIG_ALL is set in kernelconfig then modules will be
    |     automatically signed during the modules_install phase of a kernel build.
    |
    |     Signed modules are BRITTLE as the signature is outside of the defined ELF
    |     container. Thus they MAY NOT be stripped once the signature is computed
    |     and attached. Note the entire module is the signed payload, including any
    |     and all debug information present at the time of signing.
    |
    |     See: https://www.kernel.org/doc/html/latest/admin-guide/module-signing.html
    |     Signed-off-by: Denis Osterland-Heim <denis.osterland@diehl.com>
    |     Message-Id: <20210331113525.22330-1-denis.osterland@diehl.com>
    |     Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>

We might not sign kernel modules at the time, but apply the principle of
least surprise and port it now to be up to date with the upstream
kernel rule template.

Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=a22b449946eed634f42b
Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=565aabf6f36d3ed31544
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
---
 configs/platform-mips/rules/kernel-ar9331.make | 2 +-
 configs/platform-mips/rules/kernel-malta.make  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/configs/platform-mips/rules/kernel-ar9331.make b/configs/platform-mips/rules/kernel-ar9331.make
index bb7ddbc25c94..98452a90a0a4 100644
--- a/configs/platform-mips/rules/kernel-ar9331.make
+++ b/configs/platform-mips/rules/kernel-ar9331.make
@@ -98,7 +98,7 @@ $(STATEDIR)/kernel-ar9331.targetinstall:
 	@$(call install_copy, kernel-ar9331, 0, 0, 0644, \
 		$(IMAGEDIR)/vmlinuz-ar9331, /boot/vmlinuz-ar9331, n)
 
-	@$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, k)
+	@$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, n)
 	@$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules,, *.ko */build */source, n)
 
 	@$(call install_finish, kernel-ar9331)
diff --git a/configs/platform-mips/rules/kernel-malta.make b/configs/platform-mips/rules/kernel-malta.make
index 0450e04ce690..cfb387442d41 100644
--- a/configs/platform-mips/rules/kernel-malta.make
+++ b/configs/platform-mips/rules/kernel-malta.make
@@ -98,7 +98,7 @@ $(STATEDIR)/kernel-malta.targetinstall:
 	@$(call install_copy, kernel-malta, 0, 0, 0644, \
 		$(IMAGEDIR)/vmlinuz-malta, /boot/vmlinuz-malta, n)
 
-	@$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, k)
+	@$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, n)
 	@$(call install_glob, kernel-malta, 0, 0, -, /lib/modules,, *.ko */build */source, n)
 
 	@$(call install_finish, kernel-malta)
-- 
2.29.2


_______________________________________________
DistroKit mailing list
DistroKit@pengutronix.de