armbian-kernel: disable module signatures, harder

armsurvivors · Jun 4, 2024 · 48facee · 48facee
1 parent 8ae4e4e
commit 48facee
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/functions/compilation/armbian-kernel.sh b/lib/functions/compilation/armbian-kernel.sh
@@ -30,7 +30,10 @@ function armbian_kernel_config__disable_various_options() {
 		fi
 
 		kernel_config_set_n CONFIG_SECURITY_LOCKDOWN_LSM
-		kernel_config_set_n CONFIG_MODULE_SIG # No use signing modules
+		kernel_config_set_n CONFIG_MODULE_SIG     # No use signing modules
+		kernel_config_set_n CONFIG_MODULE_SIG_ALL # No use auto-signing modules
+		kernel_config_set_n MODULE_SIG_FORCE      # No forcing of module sign verification
+		kernel_config_set_n IMA_APPRAISE_MODSIG   # No appraisal module-style either
 
 		# DONE: Disable: version shenanigans
 		kernel_config_set_n CONFIG_LOCALVERSION_AUTO      # This causes a mismatch between what Armbian wants and what make produces.