Univention Bugzilla – Bug 36383
Test kernel modules are signed for UEFI Secure Boot
Last modified: 2023-03-25 06:41:43 CET
Please add a test case if the modules are signed. +++ This bug was initially created as a clone of Bug #36335 +++ We need at least: CONFIG_MODULE_SIG=y CONFIG_MODULE_SIG_SHA512=y CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_SIG_ALL=y CONFIG_MODULE_SIG_FORCE needs to be checked.
I have added a test (tests/00_checks/70_check_kernel_module_signing_settings) to check the config file named "/boot/config-$(uname -r)" for the configurations from stefans comment: > CONFIG_MODULE_SIG=y > CONFIG_MODULE_SIG_SHA512=y > CONFIG_MODULE_SIG_HASH="sha512" > CONFIG_MODULE_SIG_ALL=y > > CONFIG_MODULE_SIG_FORCE needs to be checked.
Jenkins regression: fails on all configurations: <http://jenkins.knut.univention.de:8080/job/UCS-4.0/job/UCS-4.0-3/job/Autotest%20MultiEnv/lastCompletedBuild/SambaVersion=s3,Systemrolle=member/testReport/00_checks/70_check_kernel_module_signing_settings/test/> [2015-10-13 18:24:15.582211].missing options: CONFIG_MODULE_SIG_FORCE Should be "# CONFIG_MODULE_SIG_FORCE is not set". See Bug #39527 for my analysis.
r64700 | Bug #36383 test: Fix test for kernel module signing Fix Jenkins regression Package: ucs-test Version: 5.0.173-3.1277.201510211731 Branch: ucs_4.0-0 Scope: errata4.0-3 r64701 | Bug #36383 test: Fix test for kernel module signing Merge to 4.1-0 Package: ucs-test Version: 6.0.10-8.1278.201510211734 Branch: ucs_4.1-0