David Howells 1d0059f3a4 MODSIGN: Add FIPS policy ...

If we're in FIPS mode, we should panic if we fail to verify the signature on a
module or we're asked to load an unsigned module in signature enforcing mode.
Possibly FIPS mode should automatically enable enforcing mode.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

2012-10-10 20:01:19 +10:30

92 KiB

Raw Blame History

View Raw