Re: [RFC PATCH 2/2] docs: Update kernel-parameters.txt for signature verification enhancement

2023-11-09 Thread Alessandro Carminati
Hello Prarit, Il giorno mer 8 nov 2023 alle ore 16:33 Prarit Bhargava ha scritto: > > On 9/14/23 07:27, Alessandro Carminati (Red Hat) wrote: > > Update kernel-parameters.txt to reflect new deferred signature > > verification. > > Enhances boot speed by allowing unsigned

Re: [RFC PATCH 0/2] Enhancing Boot Speed and Security with Delayed Module Signature Verification

2023-11-09 Thread Alessandro Carminati
gentle ping Il giorno gio 14 set 2023 alle ore 13:28 Alessandro Carminati (Red Hat) ha scritto: > > This patch sets up a new feature to the Linux kernel to have the ability, > while module signature checking is enabled, to delay the moment where > these signatures are effectively

Re: [RFC PATCH 1/2] Modules: Introduce boot-time module signature flexibility

2023-11-17 Thread Alessandro Carminati
Hello Luis, Thanks a lot for sharing your thoughts about this topic. Il giorno gio 16 nov 2023 alle ore 18:35 Luis Chamberlain ha scritto: > > On Thu, Sep 14, 2023 at 11:27:38AM +, Alessandro Carminati (Red Hat) > wrote: > > This commit introduces a novel boot argument

[RFC PATCH 0/2] Enhancing Boot Speed and Security with Delayed Module Signature Verification

2023-09-14 Thread Alessandro Carminati (Red Hat)
patch introduces a feature to skip signature verification during the initrd boot phase. Alessandro Carminati (Red Hat) (2): Modules: Introduce boot-time module signature flexibility docs: Update kernel-parameters.txt for signature verification enhancement .../admin-guide/kernel-parameter

[RFC PATCH 1/2] Modules: Introduce boot-time module signature flexibility

2023-09-14 Thread Alessandro Carminati (Red Hat)
can't insert 'usbserial.ko': Key was rejected by service ~ # echo 1 > /sys/kernel/security/module_sig_check_wait [ 248.036518] module_sig_check_wait can be only disabled! ~ # ``` Signed-off-by: Alessandro Carminati (Red Hat) --- include/linux/module.h | 4 +++ kernel/module/mai

[RFC PATCH 2/2] docs: Update kernel-parameters.txt for signature verification enhancement

2023-09-14 Thread Alessandro Carminati (Red Hat)
Update kernel-parameters.txt to reflect new deferred signature verification. Enhances boot speed by allowing unsigned modules in initrd after bootloader check. Signed-off-by: Alessandro Carminati (Red Hat) --- Documentation/admin-guide/kernel-parameters.txt | 9 + 1 file changed, 9