mirror of
https://github.com/AuxXxilium/kmod.git
synced 2024-11-23 23:10:53 +07:00
628677e066
Linux uses either PKCS #7 or CMS for signing modules (see scripts/sign-file.c). CMS is not supported by LibreSSL or older OpenSSL, so PKCS #7 is used on systems with these libcrypto providers. CMS and PKCS #7 formats are very similar. CMS is newer but is as much as possible backward compatible with PKCS #7 [1]. PKCS #7 is supported in the latest OpenSSL as well as CMS. The fields used for signing kernel modules are supported both in PKCS #7 and CMS. For now modinfo uses CMS with no alternative requiring OpenSSL 1.1.0 or newer. Use PKCS #7 for parsing module signature information, so that modinfo could be used both with OpenSSL and LibreSSL. [1] https://tools.ietf.org/html/rfc5652#section-1.1 Changes v1->v2: - Don't use ifdefs for keeping redundant CMS code, just use PKCS #7 both with OpenSSL and LibreSSL. Signed-off-by: Stefan Strogin <steils@gentoo.org> |
||
---|---|---|
.. | ||
docs | ||
python | ||
.gitignore | ||
COPYING | ||
libkmod-config.c | ||
libkmod-elf.c | ||
libkmod-file.c | ||
libkmod-index.c | ||
libkmod-index.h | ||
libkmod-internal.h | ||
libkmod-list.c | ||
libkmod-module.c | ||
libkmod-signature.c | ||
libkmod.c | ||
libkmod.h | ||
libkmod.pc.in | ||
libkmod.sym | ||
Makefile | ||
README |
libkmod - linux kernel module handling library ABSTRACT ======== libkmod was created to allow programs to easily insert, remove and list modules, also checking its properties, dependencies and aliases. there is no shared/global context information and it can be used by multiple sites on a single program, also being able to be used from threads, although it's not thread safe (you must lock explicitly). OVERVIEW ======== Every user should create and manage it's own library context with: struct kmod_ctx *ctx = kmod_new(kernel_dirname); kmod_unref(ctx); Modules can be created by various means: struct kmod_module *mod; int err; err = kmod_module_new_from_path(ctx, path, &mod); if (err < 0) { /* code */ } else { /* code */ kmod_module_unref(mod); } err = kmod_module_new_from_name(ctx, name, &mod); if (err < 0) { /* code */ } else { /* code */ kmod_module_unref(mod); } Or could be resolved from a known alias to a list of alternatives: struct kmod_list *list, *itr; int err; err = kmod_module_new_from_lookup(ctx, alias, &list); if (err < 0) { /* code */ } else { kmod_list_foreach(itr, list) { struct kmod_module *mod = kmod_module_get_module(itr); /* code */ } }