From f080c52c1a6a1d060a68de4cb6d2feb4109144e5 Mon Sep 17 00:00:00 2001 From: Roland Hieber Date: Sat, 10 Apr 2021 01:02:51 +0200 Subject: mips: kernel: properly handle signed modules This ports the following commits from PTXdist 2021.04.0: | commit a22b449946eed634f42b06b0c385b29621c6d02e | Author: Michael Olbrich | Date: 2021-04-01 15:58:54 | | template: kernel: proper handle signed modules | | Same as 565aabf6f36d3ed31544d882394604c4a1b13597 but for the kernel | template instead of the kernel itself. | | Signed-off-by: Michael Olbrich | | commit 565aabf6f36d3ed31544d882394604c4a1b13597 | Author: Denis Osterland-Heim | Date: 2021-03-31 13:35:25 | | kernel: proper handle signed modules | | If CONFIG_MODULE_SIG_ALL is set in kernelconfig then modules will be | automatically signed during the modules_install phase of a kernel build. | | Signed modules are BRITTLE as the signature is outside of the defined ELF | container. Thus they MAY NOT be stripped once the signature is computed | and attached. Note the entire module is the signed payload, including any | and all debug information present at the time of signing. | | See: https://www.kernel.org/doc/html/latest/admin-guide/module-signing.html | Signed-off-by: Denis Osterland-Heim | Message-Id: <20210331113525.22330-1-denis.osterland@diehl.com> | Signed-off-by: Michael Olbrich We might not sign kernel modules at the time, but apply the principle of least surprise and port it now to be up to date with the upstream kernel rule template. Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=a22b449946eed634f42b Link: https://git.pengutronix.de/cgit/ptxdist/commit/?id=565aabf6f36d3ed31544 Signed-off-by: Roland Hieber Signed-off-by: Robert Schwebel --- configs/platform-mips/rules/kernel-ar9331.make | 2 +- configs/platform-mips/rules/kernel-malta.make | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'configs') diff --git a/configs/platform-mips/rules/kernel-ar9331.make b/configs/platform-mips/rules/kernel-ar9331.make index bb7ddbc..98452a9 100644 --- a/configs/platform-mips/rules/kernel-ar9331.make +++ b/configs/platform-mips/rules/kernel-ar9331.make @@ -98,7 +98,7 @@ $(STATEDIR)/kernel-ar9331.targetinstall: @$(call install_copy, kernel-ar9331, 0, 0, 0644, \ $(IMAGEDIR)/vmlinuz-ar9331, /boot/vmlinuz-ar9331, n) - @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, k) + @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules, *.ko,, n) @$(call install_glob, kernel-ar9331, 0, 0, -, /lib/modules,, *.ko */build */source, n) @$(call install_finish, kernel-ar9331) diff --git a/configs/platform-mips/rules/kernel-malta.make b/configs/platform-mips/rules/kernel-malta.make index 0450e04..cfb3874 100644 --- a/configs/platform-mips/rules/kernel-malta.make +++ b/configs/platform-mips/rules/kernel-malta.make @@ -98,7 +98,7 @@ $(STATEDIR)/kernel-malta.targetinstall: @$(call install_copy, kernel-malta, 0, 0, 0644, \ $(IMAGEDIR)/vmlinuz-malta, /boot/vmlinuz-malta, n) - @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, k) + @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules, *.ko,, n) @$(call install_glob, kernel-malta, 0, 0, -, /lib/modules,, *.ko */build */source, n) @$(call install_finish, kernel-malta) -- cgit v1.2.3