tree 0eef1243a093410f39564051d8904c8041e1e717
parent 106a4ee258d14818467829bf0e12aeae14c16cd7
author David Howells <dhowells@redhat.com> 1348650590 +0100
committer Rusty Russell <rusty@rustcorp.com.au> 1349861479 +1030

MODSIGN: Add FIPS policy

If we're in FIPS mode, we should panic if we fail to verify the signature on a
module or we're asked to load an unsigned module in signature enforcing mode.
Possibly FIPS mode should automatically enable enforcing mode.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>