[$] Hash-based module integrity for reproducible distributions (lwn.net)
We last looked in on <a href="https://lwn.net/Articles/1012946/">hash-based integrity
checking for kernel modules</a> just over a year and half ago. Since that time,
the <a
href="https://lwn.net/ml/all/[email protected]/">patch
set</a> has undergone multiple revisions. At the 2026 <a href="https://lpc.events/">Linux Plumbers Conference</a>
(LPC), Thomas Weißschuh described the need for kernel-module integrity
guarantees while still providing reproducible builds, how his patches implement that, and some ideas for possible
further work.
checking for kernel modules</a> just over a year and half ago. Since that time,
the <a
href="https://lwn.net/ml/all/[email protected]/">patch
set</a> has undergone multiple revisions. At the 2026 <a href="https://lpc.events/">Linux Plumbers Conference</a>
(LPC), Thomas Weißschuh described the need for kernel-module integrity
guarantees while still providing reproducible builds, how his patches implement that, and some ideas for possible
further work.
Comments