Skip to content

Commit

Permalink
Update URL
Browse files Browse the repository at this point in the history
  • Loading branch information
mrdrivingduck committed Aug 11, 2020
1 parent 5d3d974 commit 7b8cee9
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ By default, the value of `KDIR` in `Makefile` points to the source code director
KDIR := /lib/modules/$(shell uname -r)/build
```

Also, you can build the module for one kernel on another kernel by overriding the `KDIR` variable. Suppose your directory is a submodule of [linux-kernel-elf-sig-verify](https://github.com/mrdrivingduck/linux-kernel-elf-sig-verify) under its directory like `linux-kernel-elf-sig-verify/linux-kernel-elf-sig-verify-module`, then you can modify `KDIR` to:
Also, you can build the module for one kernel on another kernel by overriding the `KDIR` variable. Suppose your directory is a submodule of [linux-kernel-elf-sig-verify](https://github.com/NUAA-WatchDog/linux-kernel-elf-sig-verify) under its directory like `linux-kernel-elf-sig-verify/linux-kernel-elf-sig-verify-module`, then you can modify `KDIR` to:

```
KDIR := ../
Expand Down Expand Up @@ -70,7 +70,7 @@ If the module is installed successfully, you cannot run an ELF file without sign

## Key for Verification

The `certs/kernel_key.pem` is the same as the key in [linux-elf-binary-signer](https://github.com/mrdrivingduck/linux-elf-binary-signer), and is only used for testing. To use the `binfmt_elf_signature_verification` module, you should compile the key into the kernel.
The `certs/kernel_key.pem` is the same as the key in [linux-elf-binary-signer](https://github.com/NUAA-WatchDog/linux-elf-binary-signer), and is only used for testing. To use the `binfmt_elf_signature_verification` module, you should compile the key into the kernel.

Or you can use the configuration file to get your own key pair by modifying `certs/x509.genkey`:

Expand Down
2 changes: 1 addition & 1 deletion binfmt_elf_signature_verification.c
Original file line number Diff line number Diff line change
Expand Up @@ -322,7 +322,7 @@ static int load_elf_signature_verification_binary(struct linux_binprm *bprm)
* Skip the verification of system ELF binaries. We use the name of
* interpreter instead of the name of file because of:
*
* https://github.com/mrdrivingduck/linux-kernel-elf-sig-verify/pull/13
* https://github.com/NUAA-WatchDog/linux-kernel-elf-sig-verify/pull/13
*
* ATTENTION: these code can be removed if all built-in ELF binaries
* on system are signed.
Expand Down

0 comments on commit 7b8cee9

Please sign in to comment.