Re: [PATCH v5 07/14] module: Make module authentication usable without MODULE_SIG
kpcyrd <[email protected]> Tue, 26 May 2026 14:27:36 +0200
| Newsgroups | org.kernel.vger.linux-integrity,org.kernel.vger.bpf,org.kernel.vger.linux-arch,org.kernel.vger.linux-doc,org.kernel.vger.linux-kbuild,org.kernel.vger.linux-kernel,org.kernel.vger.linux-modules,org.kernel.vger.linux-security-module,org.ozlabs.lists.linuxppc-dev |
|---|---|
| Message-ID | <[email protected]> |
On 5/26/26 1:38 PM, Thomas Weißschuh wrote: > On 2026-05-26 12:53:22+0200, Petr Pavlu wrote: >> Should MODULE_SIG_FORCE be renamed to MODULE_AUTH_FORCE, along with >> renaming the sig_enforce functionality in kernel/module/auth.c to >> auth_enforce? > > Given that it is a user-visible symbol we'll need to be a bit careful > not to break existing configurations. > I'll try to use the new "transitional" kconfig attribute. A slightly softer worded alternative (yet semantically equivalent) name could be MODULE_AUTH_REQUIRE. No strong opinion though, I think MODULE_AUTH_* does make sense. I initially shared the concern about renaming well established config options, but the transitional feature does seem to be a good fit for this. Sincerely, kpcyrd