brp-sign-kmodules.in: add comment regarding this script's scope

This commit is contained in:
Gleb Fotengauer-Malinovskiy 2021-11-02 22:21:04 +03:00
parent 8e514bdbdd
commit 0240974c0a

View File

@ -61,6 +61,12 @@ MODULE_SIG_HASH=$(get_config MODULE_SIG_HASH)
MODULE_SIG_KEY=$( get_config MODULE_SIG_KEY)
MODULE_SIG_CERT=certs/signing_key.x509
# CONFIG_MODULE_SIG_ALL=y means that the modules were already signed
# during the kernel's make modules_install. But these modules may have
# been debugedit(1)ed and strip(1)ped to detach the debuginfo and
# therefore lost their signatures.
# This brp-script is intended only for resigning such modules.
if [ "$MODULE_SIG_ALL" != "y" ]; then
Warning "Module signing is not enabled (CONFIG_MODULE_SIG_ALL=$MODULE_SIG_ALL)"
exit 0