[PATCH 0/2] Fix exclusion of staging drivers from module signing

Seth Forshee seth.forshee at canonical.com
Mon May 15 20:37:54 UTC 2017


BugLink: http://bugs.launchpad.net/bugs/1690908

We exclude staging drivers from module signing because these drivers are
not expected to be well vetted for security issues, with a whitelist to
opt some staging drivers into module signing. However this mechanism is
not working properly due to a couple of bugs in the implementation.

The bugs manifests differently in xenial versus zesty due to a
difference in the implementation. In xenial the result is that no
staging modules are signed, not even those in the whitelist. In zesty
all staging drivers are signed. Note that yakkety does not exclude
staging modules from signing.

The following patches fix these issues.

Thanks,
Seth





More information about the kernel-team mailing list