sign kernel modules
Open, NormalPublic
Actions

Assigned To

None

Authored By

	Patrick
	Dec 23 2019, 2:15 PM

Tags

Referenced Files

None

Subscribers

Description

Sign lkrg, tirdad, VirtualBox guest additions.

/usr/lib/linux-kbuild-4.19/scripts/sign-file

That would allow us to enable kernel lockdown. (T670)

https://forums.whonix.org/t/enforce-kernel-module-software-signature-verification-module-signing-disallow-kernel-module-loading-by-default/7880

Details

Impact: Normal

Related Objects

Mentioned Here: T670: Activating Lockdown

Event Timeline

Patrick triaged this task as Normal priority.Dec 23 2019, 2:15 PM

Patrick created this task.

Herald added a project: Whonix. · View Herald TranscriptDec 23 2019, 2:15 PM

Herald added a subscriber: • entr0py. · View Herald Transcript