CONFIG_IMA_APPRAISE_REQUIRE_MODULE_SIGS: Appraise kernel modules signatures

General informations

The Linux kernel configuration item CONFIG_IMA_APPRAISE_REQUIRE_MODULE_SIGS:

• prompt: Appraise kernel modules signatures
• type: bool
• depends on: CONFIG_IMA_APPRAISE_BUILD_POLICY
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 4.19–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

Enabling this rule will require all kernel modules to be signed and verified by a public key on the trusted IMA keyring.

Kernel module signatures can only be verified by IMA-appraisal, via the finit_module syscall. Enabling this rule will prevent the usage of the init_module syscall.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: