From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 10 Apr 2021 01:03:15 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1lV09j-0000Ev-Rd for lore@lore.pengutronix.de; Sat, 10 Apr 2021 01:03:15 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1lV09j-0002Pw-84; Sat, 10 Apr 2021 01:03:15 +0200 Received: from dude.hi.pengutronix.de ([2001:67c:670:100:1d::7]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lV09b-0002PC-8o; Sat, 10 Apr 2021 01:03:07 +0200 Received: from rhi by dude.hi.pengutronix.de with local (Exim 4.92) (envelope-from ) id 1lV09a-00056Y-VT; Sat, 10 Apr 2021 01:03:06 +0200 From: Roland Hieber To: distrokit@pengutronix.de Date: Sat, 10 Apr 2021 01:02:51 +0200 Message-Id: <20210409230252.28738-2-rhi@pengutronix.de> X-Mailer: git-send-email 2.29.2 In-Reply-To: <20210409230252.28738-1-rhi@pengutronix.de> References: <20210409230252.28738-1-rhi@pengutronix.de> MIME-Version: 1.0 Subject: [DistroKit] [PATCH 2/3] mips: kernel: properly handle signed modules X-BeenThere: distrokit@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Roland Hieber Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "DistroKit" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: distrokit-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false This ports the following commits from PTXdist 2021.04.0: | commit a22b449946eed634f42b06b0c385b29621c6d02e | Author: Michael Olbrich | Date: 2021-04-01 15:58:54 | | template: kernel: proper handle signed modules | | Same as 565aabf6f36d3ed31544d882394604c4a1b13597 but for the kernel | template instead of the kernel itself. | | Signed-off-by: Michael Olbrich | | commit 565aabf6f36d3ed31544d882394604c4a1b13597 | Author: Denis Osterland-Heim | Date: 2021-03-31 13:35:25 | | kernel: proper handle signed modules | | If CONFIG_MODULE_SIG_ALL is set in kernelconfig then modules will be | automatically signed during the modules_install phase of a kernel build. | | Signed modules are BRITTLE as the signature is outside of the defined ELF | container. Thus they MAY NOT be stripped once the signature is computed | and attached. Note the entire module is the signed payload, including any | and all debug information present at the time of signing. | | See: https://www.kernel.org/doc/html/latest/admin-guide/module-signing.html | Signed-off-by: Denis Osterland-Heim | Message-Id: <20210331113525.22330-1-denis.osterland@diehl.com> | Signed-off-by: Michael Olbrich We might not sign kernel modules at the time, but apply the principle of least surprise and port it now to be up to date with the upstream kernel rule template. Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=a22b449946eed634f42b Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=565aabf6f36d3ed31544 Signed-off-by: Roland Hieber --- configs/platform-mips/rules/kernel-ar9331.make | 2 +- configs/platform-mips/rules/kernel-malta.make | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/configs/platform-mips/rules/kernel-ar9331.make b/configs/platform-mips/rules/kernel-ar9331.make index bb7ddbc25c94..98452a90a0a4 100644 --- a/configs/platform-mips/rules/kernel-ar9331.make +++ b/configs/platform-mips/rules/kernel-ar9331.make @@ -98,7 +98,7 @@ $(STATEDIR)/kernel-ar9331.targetinstall: @$(call install_copy, kernel-ar9331, 0, 0, 0644, \ $(IMAGEDIR)/vmlinuz-ar9331, /boot/vmlinuz-ar9331, n) - @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, k) + @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, n) @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules,, *.ko */build */source, n) @$(call install_finish, kernel-ar9331) diff --git a/configs/platform-mips/rules/kernel-malta.make b/configs/platform-mips/rules/kernel-malta.make index 0450e04ce690..cfb387442d41 100644 --- a/configs/platform-mips/rules/kernel-malta.make +++ b/configs/platform-mips/rules/kernel-malta.make @@ -98,7 +98,7 @@ $(STATEDIR)/kernel-malta.targetinstall: @$(call install_copy, kernel-malta, 0, 0, 0644, \ $(IMAGEDIR)/vmlinuz-malta, /boot/vmlinuz-malta, n) - @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, k) + @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, n) @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules,, *.ko */build */source, n) @$(call install_finish, kernel-malta) -- 2.29.2 _______________________________________________ DistroKit mailing list DistroKit@pengutronix.de