linux-kernel - Re: [PATCH 00/14] Add SPDX SBOM generation tool

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <eec88937-2afd-45cc-bf7c-28b383e27d5b@tngtech.com>
Date: Mon, 19 Jan 2026 21:08:14 +0100
From: Luis Augenstein <luis.augenstein@...tech.com>
To: Greg KH <gregkh@...uxfoundation.org>
Cc: nathan@...nel.org, nsc@...nel.org, linux-kbuild@...r.kernel.org,
 linux-kernel@...r.kernel.org, akpm@...ux-foundation.org,
 maximilian.huber@...tech.com
Subject: Re: [PATCH 00/14] Add SPDX SBOM generation tool

> Also, I don't know if this is even possible, or you care about it, but
> if you have ANY sbom file present, it is not regenerated:
> [...]
> So, if I change the build config, which will change the sbom output,
> will the sbom be regenerated?
> Should it depend on the config .h files to know this?

Thanks for pointing this out.
Yes, we can add the following to the Makefile dependencies to ensure the
SBOM is regenerated when the build changes:
- $(objtree)/$(KBUILD_IMAGE)
- $(objtree)/include/generated/autoconf.h
- $(objtree)/modules.order (if CONFIG_MODULES is set)

This should cover most changes.
When you mentioned "config .h files," did you have any other specific
files in mind that should be included as dependencies?

Best,
Luis

-- 
Luis Augenstein * luis.augenstein@...tech.com * +49-152-25275761
TNG Technology Consulting GmbH, Beta-Str. 13, 85774 Unterföhring
Geschäftsführer: Henrik Klagges, Dr. Robert Dahlke, Thomas Endres
Aufsichtsratsvorsitzender: Christoph Stock
Sitz: Unterföhring * Amtsgericht München * HRB 135082

Download attachment "OpenPGP_0x795C8ACACDDCFB34.asc" of type "application/pgp-keys" (3156 bytes)

Download attachment "OpenPGP_signature.asc" of type "application/pgp-signature" (841 bytes)