Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-32694

automotive: set CONFIG_MODULE_SIG_FORCE to y for RHIVOS only

    • Icon: Task Task
    • Resolution: Not a Bug
    • Icon: Undefined Undefined
    • None
    • None
    • kernel / automotive
    • None
    • sst_kernel_ft
    • ssg_core_kernel
    • 5
    • False
    • Hide

      None

      Show
      None

      The FuSa and Automotive teams want to enable strict module loading in RHIVOS (rhel-9:9.4-automotive) but want to allow users to load self-built modules in the public repo (centos-stream-9:main-automotive).

      This makes sense to me.  We definitely want higher security in our RHIVOS product by restricting module loads, and at the same time we want public users to be able to easily debug their modules.

      My plan is to use the rhel specfile variable, and just add some code to override the value of CONFIG_MODULE_SIG_FORCE to 'y' in RHIVOS, and keep it as 'is not set' in the public repo. 

            fdarocha@redhat.com Francisco da Rocha
            prarit@redhat.com Prarit Bhargava
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: