| commit | b082e8fb62ebde68a221fbcc2629c055bd5a1400 | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Fri May 25 16:05:54 2012 +0100 |
| committer | David Howells <dhowells@redhat.com> | Fri May 25 16:05:54 2012 +0100 |
| tree | a74d9dd6c236451a1a31b60ec91563c1570e1659 | |
| parent | 7086db640d04893a433979794cc56dbc4cb53854 [diff] |
MODSIGN: Panic the kernel if FIPS is enabled upon module signing failure If module signing fails when the kernel is running with FIPS enabled then the kernel should panic lest the crypto layer be compromised. Possibly a panic shouldn't happen on cases like ENOMEM. Reported-by: Stephan Mueller <stephan.mueller@atsec.com> Signed-off-by: David Howells <dhowells@redhat.com>