NAME

       kmodsign - Kernel module signing tool

SYNOPSIS

       kmodsign [-dpkD] <hash algo> <key> <x509> <module> [<dest>]

DESCRIPTION

       Sign a kernel module image for use with an enforcing kernel.

OPTIONS

       -p     save a copy of the p7s signature (.p7s)

       -d     produce a detached signature file (.p7s) only

       -D     produce a full detached signature block (may be cat'd onto the end of a module)

       -k     switch to using keyid for identification