| Kconfig (60c8eb38c1b75e83194a07ec7acfe85852fcc0d8) | Kconfig (b75b0a819af9f78fc395b189cddd40f590194d20) |
|---|---|
| 1# SPDX-License-Identifier: GPL-2.0-only | 1# SPDX-License-Identifier: GPL-2.0-only |
| 2config DEFCONFIG_LIST 3 string 4 depends on !UML 5 option defconfig_list 6 default "/lib/modules/$(shell,uname -r)/.config" 7 default "/etc/kernel-config" 8 default "/boot/config-$(shell,uname -r)" 9 default "arch/$(SRCARCH)/configs/$(KBUILD_DEFCONFIG)" 10 | |
| 11config CC_VERSION_TEXT 12 string 13 default "$(CC_VERSION_TEXT)" 14 help 15 This is used in unclear ways: 16 17 - Re-run Kconfig when the compiler is updated 18 The 'default' property references the environment variable, --- 2140 unchanged lines hidden (view full) --- 2159 depends on MODULE_SIG 2160 help 2161 Reject unsigned modules or signed modules for which we don't have a 2162 key. Without this, such modules will simply taint the kernel. 2163 2164config MODULE_SIG_ALL 2165 bool "Automatically sign all modules" 2166 default y | 2config CC_VERSION_TEXT 3 string 4 default "$(CC_VERSION_TEXT)" 5 help 6 This is used in unclear ways: 7 8 - Re-run Kconfig when the compiler is updated 9 The 'default' property references the environment variable, --- 2140 unchanged lines hidden (view full) --- 2150 depends on MODULE_SIG 2151 help 2152 Reject unsigned modules or signed modules for which we don't have a 2153 key. Without this, such modules will simply taint the kernel. 2154 2155config MODULE_SIG_ALL 2156 bool "Automatically sign all modules" 2157 default y |
| 2167 depends on MODULE_SIG || IMA_APPRAISE_MODSIG | 2158 depends on MODULE_SIG |
| 2168 help 2169 Sign all modules during make modules_install. Without this option, 2170 modules must be signed manually, using the scripts/sign-file tool. 2171 2172comment "Do not forget to sign required modules with scripts/sign-file" 2173 depends on MODULE_SIG_FORCE && !MODULE_SIG_ALL 2174 2175choice 2176 prompt "Which hash algorithm should modules be signed with?" | 2159 help 2160 Sign all modules during make modules_install. Without this option, 2161 modules must be signed manually, using the scripts/sign-file tool. 2162 2163comment "Do not forget to sign required modules with scripts/sign-file" 2164 depends on MODULE_SIG_FORCE && !MODULE_SIG_ALL 2165 2166choice 2167 prompt "Which hash algorithm should modules be signed with?" |
| 2177 depends on MODULE_SIG || IMA_APPRAISE_MODSIG | 2168 depends on MODULE_SIG |
| 2178 help 2179 This determines which sort of hashing algorithm will be used during 2180 signature generation. This algorithm _must_ be built into the kernel 2181 directly so that signature verification can take place. It is not 2182 possible to load a signed module containing the algorithm to check 2183 the signature on that module. 2184 2185config MODULE_SIG_SHA1 --- 15 unchanged lines hidden (view full) --- 2201config MODULE_SIG_SHA512 2202 bool "Sign modules with SHA-512" 2203 select CRYPTO_SHA512 2204 2205endchoice 2206 2207config MODULE_SIG_HASH 2208 string | 2169 help 2170 This determines which sort of hashing algorithm will be used during 2171 signature generation. This algorithm _must_ be built into the kernel 2172 directly so that signature verification can take place. It is not 2173 possible to load a signed module containing the algorithm to check 2174 the signature on that module. 2175 2176config MODULE_SIG_SHA1 --- 15 unchanged lines hidden (view full) --- 2192config MODULE_SIG_SHA512 2193 bool "Sign modules with SHA-512" 2194 select CRYPTO_SHA512 2195 2196endchoice 2197 2198config MODULE_SIG_HASH 2199 string |
| 2209 depends on MODULE_SIG || IMA_APPRAISE_MODSIG | 2200 depends on MODULE_SIG |
| 2210 default "sha1" if MODULE_SIG_SHA1 2211 default "sha224" if MODULE_SIG_SHA224 2212 default "sha256" if MODULE_SIG_SHA256 2213 default "sha384" if MODULE_SIG_SHA384 2214 default "sha512" if MODULE_SIG_SHA512 2215 2216config MODULE_COMPRESS 2217 bool "Compress modules on installation" --- 126 unchanged lines hidden --- | 2201 default "sha1" if MODULE_SIG_SHA1 2202 default "sha224" if MODULE_SIG_SHA224 2203 default "sha256" if MODULE_SIG_SHA256 2204 default "sha384" if MODULE_SIG_SHA384 2205 default "sha512" if MODULE_SIG_SHA512 2206 2207config MODULE_COMPRESS 2208 bool "Compress modules on installation" --- 126 unchanged lines hidden --- |