Skip to contentSkip to conversation

New: Support for kernel signed modules

Buildroot bugzilla at busybox.net 1 participant 5 messages Jan 6, 2014 – Feb 23, 2014

lore
Share & tools
lore
#0 lore raw

https://bugs.busybox.net/show_bug.cgi?id=6764

Summary: Support for kernel signed modules
Product: buildroot
Version: unspecified
Platform: All
OS/Version: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: Other
AssignedTo: unassigned at buildroot.uclibc.org
ReportedBy: cassiano at idbinfo.com.br
CC: buildroot at uclibc.org
Estimated Hours: 0.0

Attached is a patch which enable signed kernel modules usage, when stripping is activated on build options

If modules are stripped, the signing key is removed from it, preventing module load.

Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
#1 lore raw

[Buildroot] [Bug 6764] Support for kernel signed modules

https://bugs.busybox.net/show_bug.cgi?id=6764

--- Comment #1 from Cassiano Martin <[email protected]> 2014-01-06 19:06:09 UTC --- Created attachment 5162
--> https://bugs.busybox.net/attachment.cgi?id=5162
signed modules patch

Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
#2 lore raw

[Buildroot] [Bug 6764] Support for kernel signed modules

In reply to bugzilla at busybox.net

https://bugs.busybox.net/show_bug.cgi?id=6764

Yann E. MORIN <[email protected]> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |yann.morin.1998 at free.fr

--- Comment #2 from Yann E. MORIN <[email protected]> 2014-01-06 19:20:26 UTC --- Cassiano, All,

Thanks for your patch.

Could you please conmtribute it as explained in the manual, please?
http://buildroot.net/downloads/manual/manual.html#_contributing_to_buildroot

We do not use the bug-tracker to submit patches, only to track actual and unsolved issues.

Regards,
Yann E. MORIN.

Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
#3 lore raw

[Buildroot] [Bug 6764] Support for kernel signed modules

In reply to bugzilla at busybox.net

https://bugs.busybox.net/show_bug.cgi?id=6764

--- Comment #3 from Thomas De Schampheleire <[email protected]> 2014-02-07 08:40:52 UTC --- Hi Cassiano,

Do you mind sending your patch to the mailing list?
This will facilitate review and discussion on the patch, and finally integration in buildroot itself.
You will need to be subscribed to the list, though.
http://www.buildroot.org/lists.html

Thanks in advance!
Thomas

Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
#4 lore raw

[Buildroot] [Bug 6764] Support for kernel signed modules

In reply to bugzilla at busybox.net

https://bugs.busybox.net/show_bug.cgi?id=6764

Thomas De Schampheleire <[email protected]> changed:

What |Removed |Added
----------------------------------------------------------------------------

             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #4 from Thomas De Schampheleire <[email protected]> 2014-02-23 14:51:22 UTC --- A better solution to this problem would be to strip the modules before signing.
However, this should be done in the kernel rather than in buildroot.
Please discuss the matter upstream, once it is fixed there, it will be in
buildroot too (when using these newer kernels). Thanks.

Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.