Appraise kernel modules signatures
configname: CONFIG_IMA_APPRAISE_REQUIRE_MODULE_SIGS
Linux Kernel Configuration
└─>Security options
└─>Appraise kernel modules signatures
In linux kernel since version 3.10 (release Date: 2013-06-30)
Enabling this rule will require all kernel modules to be signed
and verified by a public key on the trusted IMA keyring.
Kernel module signatures can only be verified by IMA-appraisal,
via the finit_module syscall. Enabling this rule will prevent
the usage of the init_module syscall.
and verified by a public key on the trusted IMA keyring.
Kernel module signatures can only be verified by IMA-appraisal,
via the finit_module syscall. Enabling this rule will prevent
the usage of the init_module syscall.