linux/security/loadpin/Makefile at ae65a26dd387fec18dd1645fbb4b901b379cd6f5 - public-mirrors/linux - Forgejo: just a girl doing tech things

public-mirrors/linux

mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-05-23 09:42:34 +00:00

Kees Cook 9b091556a0 LSM: LoadPin for kernel file loading restrictions

This LSM enforces that kernel-loaded files (modules, firmware, etc)
must all come from the same filesystem, with the expectation that
such a filesystem is backed by a read-only device such as dm-verity
or CDROM. This allows systems that have a verified and/or unchangeable
filesystem to enforce module and firmware loading restrictions without
needing to sign the files individually.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>

2016-04-21 10:47:27 +10:00

1 line

44 B

Makefile

Raw Blame History

obj-$(CONFIG_SECURITY_LOADPIN) += loadpin.o