Revision 0c18f29aae7ce3dadd26d8ee3505d07cc982df75 authored by Mimi Zohar on 22 June 2021, 11:36:41 UTC, committed by Linus Torvalds on 22 June 2021, 18:13:19 UTC
Irrespective as to whether CONFIG_MODULE_SIG is configured, specifying "module.sig_enforce=1" on the boot command line sets "sig_enforce". Only allow "sig_enforce" to be set when CONFIG_MODULE_SIG is configured. This patch makes the presence of /sys/module/module/parameters/sig_enforce dependent on CONFIG_MODULE_SIG=y. Fixes: fda784e50aac ("module: export module signature enforcement status") Reported-by: Nayna Jain <nayna@linux.ibm.com> Tested-by: Mimi Zohar <zohar@linux.ibm.com> Tested-by: Jessica Yu <jeyu@kernel.org> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Jessica Yu <jeyu@kernel.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent a96bfed
File | Mode | Size |
---|---|---|
boot | ||
configs | ||
include | ||
kernel | ||
lib | ||
mm | ||
Kconfig | -rw-r--r-- | 905 bytes |
Kconfig.cpu | -rw-r--r-- | 1.9 KB |
Kconfig.debug | -rw-r--r-- | 68 bytes |
Makefile | -rw-r--r-- | 1.3 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...