diff options
| author |   David Woodhouse <David.Woodhouse@intel.com> | 2015-07-20 21:16:28 +0100 |
|---|---|---|
| committer |   David Howells <dhowells@redhat.com> | 2015-08-07 16:26:14 +0100 |
| commit | af1eb2913275c3ab1598b0c24c893499092df08a (patch) | |
| tree | e176ad5867a4d4ca3db433e62fb362e5fff00be8 /Documentation/module-signing.txt | |
| parent | modsign: Abort modules_install when signing fails (diff) | |
| download | linux-dev-af1eb2913275c3ab1598b0c24c893499092df08a.tar.xz linux-dev-af1eb2913275c3ab1598b0c24c893499092df08a.zip | |
modsign: Allow password to be specified for signing key
We don't want this in the Kconfig since it might then get exposed in
/proc/config.gz. So make it a parameter to Kbuild instead. This also
means we don't have to jump through hoops to strip quotes from it, as
we would if it was a config option.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'Documentation/module-signing.txt')
| -rw-r--r-- | Documentation/module-signing.txt | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Documentation/module-signing.txt b/Documentation/module-signing.txt index c72702ec1ded..faaa6ea002f7 100644 --- a/Documentation/module-signing.txt +++ b/Documentation/module-signing.txt @@ -194,6 +194,9 @@ The hash algorithm used does not have to match the one configured, but if it doesn't, you should make sure that hash algorithm is either built into the kernel or can be loaded without requiring itself. +If the private key requires a passphrase or PIN, it can be provided in the +$KBUILD_SIGN_PIN environment variable. + ============================ SIGNED MODULES AND STRIPPING |