Re: [PATCH] Fix Kconfig dependencies for FIPS

2016-09-15 Thread NTU
I hope I got this right, on my screen the first "depends on" line is incorrectly truncated, hope this will not become problematic.. Alec Ari -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majord...@vger.kernel.org More majordomo info at http

[PATCH] Fix Kconfig dependencies for FIPS

2016-09-15 Thread NTU
Currently FIPS depends on MODULE_SIG, even if MODULES is disabled. This change allows the enabling of FIPS without support for modules. If module loading support is enabled, only then does FIPS require MODULE_SIG. Signed-off-by: Alec Ari --- crypto/Kconfig | 2 +- 1 file changed, 1 insertion(+)

Re: CONFIG_FIPS without module loading support?

2016-09-15 Thread NTU
to choice, it is so that way users cannot have both options disabled, in the case they don't read the help for it. Alec On Wed, Sep 14, 2016 at 11:58 PM, Stephan Mueller wrote: > Am Mittwoch, 14. September 2016, 19:18:43 CEST schrieb NTU: > > Hi NTU, > >> Hello, >

Re: CONFIG_FIPS without module loading support?

2016-09-14 Thread NTU
Hello, I've never written a patch before to the official kernel mailing list (that I remember) so please forgive me if I didn't send this in properly. I've generated this using git format-patch HEAD~ --stdout &> kconfig_fix_for_fips.patch and have attached the file in this email, gathering as much

Re: CONFIG_FIPS without module loading support?

2016-09-01 Thread NTU
Ok, can we merge that in? Alec Ari -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

CONFIG_FIPS without module loading support?

2016-08-31 Thread NTU
Hello, CRYPTO_FIPS depends on MODULE_SIG and I understand why it would as you wouldn't want unsigned modules from external sources being loaded. If CONFIG_MODULES is disabled though (no module loading) there are no modules to sign in the first place. Wouldn't it make more sense for CONFIG_FIPS to