Lines Matching refs:module
8 - Configuring module signing.
22 The kernel module signing facility cryptographically signs modules during
23 installation and then checks the signature upon loading the module. This
26 making it harder to load a malicious module into the kernel. The module
42 The module signing facility is enabled by going to the "Enable Loadable Module
51 This specifies how the kernel should deal with a module that has a
52 signature for which the key is not known or a module that is unsigned.
63 Irrespective of the setting here, if the module has a signature block that
88 than being a module) so that modules signed with that algorithm can have
155 Beyond the public key generated specifically for module signing, any file
180 To manually sign a module, use the scripts/sign-file tool available in
186 4. The kernel module to be signed
188 The following is an example to sign a kernel module:
191 kernel-signkey.x509 module.ko
202 A signed module has a digital signature simply appended at the end. The string
203 "~Module signature appended~." at the end of the module's file confirms that a
208 attached. Note the entire module is the signed payload, including any and all
228 unsigned. Any module for which the kernel has a key, but which proves to have
231 Any module that has an unparseable signature will be rejected.