Mickaël Salaün addf466389 certs: Check that builtin blacklist hashes are valid ... Add and use a check-blacklist-hashes.awk script to make sure that the builtin blacklist hashes set with CONFIG_SYSTEM_BLACKLIST_HASH_LIST will effectively be taken into account as blacklisted hashes. This is useful to debug invalid hash formats, and it make sure that previous hashes which could have been loaded in the kernel, but silently ignored, are now noticed and deal with by the user at kernel build time. This also prevent stricter blacklist key description checking (provided by following commits) to failed for builtin hashes. Update CONFIG_SYSTEM_BLACKLIST_HASH_LIST help to explain the content of a hash string and how to generate certificate ones. Cc: David Howells <dhowells@redhat.com> Cc: David Woodhouse <dwmw2@infradead.org> Cc: Eric Snowberg <eric.snowberg@oracle.com> Cc: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com> Link: https://lore.kernel.org/r/20210712170313.884724-3-mic@digikod.net Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>		2022-05-23 18:47:49 +03:00
..
atomic	atomics: Fix atomic64_{read_acquire,set_release} fallbacks	2022-02-11 12:13:56 +01:00
basic	fixdep: use fflush() and ferror() to ensure successful write to files	2022-03-31 12:03:46 +09:00
clang-tools	…
coccinelle	drop fen.cocci	2022-01-15 12:15:35 +01:00
dtc	Devicetree updates for v5.18:	2022-03-26 11:41:53 -07:00
dummy-tools	…
gcc-plugins	gcc-plugins: latent_entropy: use /dev/urandom	2022-04-12 11:31:40 -07:00
gdb	…
genksyms	…
kconfig	kconfig: remove stale comment about removed kconfig_print_symbol()	2022-04-02 00:04:17 +09:00
ksymoops	…
mod	modpost: restore the warning message for missing symbol versions	2022-04-03 03:11:51 +09:00
package	…
selinux	…
tracing	…
.gitignore	…
Kbuild.include	…
Kconfig.include	…
Lindent	…
Makefile	ftrace: Have architectures opt-in for mcount build time sorting	2022-01-27 19:15:44 -05:00
Makefile.asm-generic	…
Makefile.build	objtool: Enable unreachable warnings for CLANG LTO	2022-04-19 21:58:48 +02:00
Makefile.clang	um: Allow builds with Clang	2022-03-21 08:13:03 -07:00
Makefile.clean	kbuild: replace $(if A,A,B) with $(or A,B)	2022-02-15 12:25:56 +09:00
Makefile.compiler	…
Makefile.debug	…
Makefile.dtbinst	…
Makefile.extrawarn	Kbuild: add -Wno-shift-negative-value where -Wextra is used	2022-03-13 17:30:31 +09:00
Makefile.gcc-plugins	gcc-plugins/stackleak: Provide verbose mode	2022-02-06 10:49:57 -08:00
Makefile.headersinst	…
Makefile.host	…
Makefile.kasan	…
Makefile.kcov	…
Makefile.kcsan	…
Makefile.lib	Kbuild updates for v5.18	2022-03-31 11:59:03 -07:00
Makefile.modfinal	…
Makefile.modinst	…
Makefile.modpost	…
Makefile.package	…
Makefile.ubsan	ubsan: remove CONFIG_UBSAN_OBJECT_SIZE	2022-01-20 08:52:55 +02:00
Makefile.userprogs	…
adjust_autoksyms.sh	…
as-version.sh	…
asn1_compiler.c	…
bin2c.c	…
bloat-o-meter	…
bootgraph.pl	…
bpf_doc.py	bpf/scripts: Raise an exception if the correct number of sycalls are not generated	2022-01-19 10:24:50 -08:00
cc-can-link.sh	…
cc-version.sh	…
check-blacklist-hashes.awk	certs: Check that builtin blacklist hashes are valid	2022-05-23 18:47:49 +03:00
check-sysctl-docs	…
check_extable.sh	…
checkdeclares.pl	…
checkincludes.pl	…
checkkconfigsymbols.py	…
checkpatch.pl	checkpatch: use python3 to find codespell dictionary	2022-03-23 19:00:34 -07:00
checkstack.pl	…
checksyscalls.sh	…
checkversion.pl	…
cleanfile	…
cleanpatch	…
coccicheck	…
config	…
const_structs.checkpatch	const_structs.checkpatch: add frequently used ops structs	2022-01-20 08:52:54 +02:00
decode_stacktrace.sh	…
decodecode	…
depmod.sh	…
dev-needs.sh	…
diffconfig	…
documentation-file-ref-check	…
export_report.pl	…
extract-ikconfig	…
extract-module-sig.pl	…
extract-sys-certs.pl	…
extract-vmlinux	…
extract_xc3028.pl	…
faddr2line	…
file-size.sh	…
find-unused-docs.sh	…
gcc-goto.sh	…
gcc-ld	…
gcc-x86_32-has-stack-protector.sh	…
gcc-x86_64-has-stack-protector.sh	…
gen_autoksyms.sh	…
gen_ksymdeps.sh	…
generate_initcall_order.pl	…
get_abi.pl	Some late-arriving documentation improvements. This is mostly build-system	2022-03-31 12:10:42 -07:00
get_dvb_firmware	…
get_feat.pl	scripts/get_feat.pl: allow output the parsed file names	2022-03-28 13:53:46 -06:00
get_maintainer.pl	get_maintainer: don't remind about no git repo when --nogit is used	2022-01-20 08:52:53 +02:00
gfp-translate	…
headerdep.pl	…
headers_install.sh	…
insert-sys-cert.c	…
jobserver-exec	…
kallsyms.c	kallsyms: ignore all local labels prefixed by '.L'	2022-02-22 00:44:16 +09:00
kernel-doc	scripts/kernel-doc: change the line number meta info	2022-03-28 13:53:46 -06:00
ld-version.sh	…
leaking_addresses.pl	…
link-vmlinux.sh	objtool: Enable unreachable warnings for CLANG LTO	2022-04-19 21:58:48 +02:00
makelst	…
markup_oops.pl	…
min-tool-version.sh	…
mkcompile_h	sched/preempt: Tell about PREEMPT_DYNAMIC on kernel headers	2022-03-11 15:36:35 +01:00
mksysmap	…
mkuboot.sh	…
module.lds.S	…
modules-check.sh	…
nsdeps	…
objdiff	…
pahole-flags.sh	scripts/pahole-flags.sh: Parse DWARF and generate BTF with multithreading.	2022-02-22 14:32:44 -08:00
pahole-version.sh	kbuild: Add CONFIG_PAHOLE_VERSION	2022-02-02 11:19:33 +01:00
parse-maintainers.pl	…
patch-kernel	…
profile2linkerlist.pl	…
prune-kernel	…
recordmcount.c	…
recordmcount.h	…
recordmcount.pl	nds32: Remove the architecture	2022-03-07 13:54:59 +01:00
remove-stale-files	Kbuild updates for v5.17	2022-01-19 11:15:19 +02:00
setlocalversion	…
show_delta	…
sign-file.c	…
sorttable.c	s390/extable: convert to relative table with data	2022-03-08 00:33:00 +01:00
sorttable.h	script/sorttable: Fix some initialization problems	2022-01-18 10:17:18 -05:00
spdxcheck-test.sh	…
spdxcheck.py	spdxcheck.py: Fix a type error	2022-02-04 16:43:01 +01:00
spelling.txt	scripts/spelling.txt: add more spellings to spelling.txt	2022-03-22 15:57:00 -07:00
sphinx-pre-install	…
split-man.pl	…
stackdelta	…
stackusage	…
subarch.include	…
syscallhdr.sh	…
syscallnr.sh	…
syscalltbl.sh	…
tags.sh	…
test_fortify.sh	fortify: Update compile-time tests for Clang 14	2022-02-13 16:50:06 -08:00
tools-support-relr.sh	…
unifdef.c	…
ver_linux	…
xen-hypercalls.sh	…
xz_wrap.sh	…