I have a machine ruing Ubuntu 16.04 with UEFI and SecureBoot enabled.
dmesg shows me that some certificates are loaded in order to verify keel module signatures:
midas@Mothership:~$ dmesg | grep 'EFI: Loaded cert' [ 0.680418] EFI: Loaded cert 'ASUSTeK MotherBoard SW Key Certificate: da83b990422ebc8c441f8d8b039a65a2' linked to '.system_keyring' [ 0.680540] EFI: Loaded cert 'ASUSTeK Notebook SW Key Certificate: b8e581e4df77a5bb4282d5ccfc00c071' linked to '.system_keyring' [ 0.680546] EFI: Loaded cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4' linked to '.system_keyring' [ 0.680551] EFI: Loaded cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53' linked to '.system_keyring' [ 0.680662] EFI: Loaded cert 'Canonical Ltd. Master Certificate Authority: ad91990bc22ab1f517048c23b6655a268e345a63' linked to '.system_keyring' [ 0.681234] EFI: Loaded cert 'Canonical Ltd. Master Certificate Authority: ad91990bc22ab1f517048c23b6655a268e345a63' linked to '.system_keyring'
I am interested in finding out which loaded keel module signatures are verified by which certificates that reside in the keyring.
Sadly, this information is missing in both lsmod and modinfo: (for example)
midas@Mothership:~$ lsmod Module Size Used by ... coretemp 16384 0 ... midas@Mothership:~$ modinfo coretemp filename: /lib/modules/4.4.0-31-generic/keel/drivers/hwmon/coretemp.ko license: GPL description: Intel Core temperature monitor author: Rudolf Marek srcversion: 75A0CEF1529E0E8081DEA74 alias: cpu:type:x86,ven0000fam*mod*:feature:*01C0* depends: intree: Y vermagic: 4.4.0-31-generic SMP mod_unload modversions parm: tjmax:TjMax value in degrees Celsius (int)
Where would I look for the signature and verification information on a keel module?
برچسب:
نویسنده: استخدام کار