Skip to content

redhat/kernel.spec.template: Set CONFIG_MODULE_SIG_FORCE to y for RHIVOS only

JIRA: https://issues.redhat.com/browse/RHEL-32700
Upstream Status: RHEL only

The FuSa and Automotive teams want to enable strict module loading in
RHIVOS but want to allow users to load self-built modules in the public
repo.

This makes sense to me. We definitely want higher security in our RHIVOS
product by restricting module loads, and at the same time we want public
users to be able to easily debug their modules.

There are a few ways to do this and I ultimately decided on four lines of
code in the kernel.spec file. This seems like the easiest way to be able
to find this change.

Set CONFIG_MODULE_SIG_FORCE to y for RHIVOS only.

Signed-off-by: Prarit Bhargava prarit@redhat.com

Edited by Prarit Bhargava

Merge request reports