Revision 0c18f29aae7ce3dadd26d8ee3505d07cc982df75 authored by Mimi Zohar on 22 June 2021, 11:36:41 UTC, committed by Linus Torvalds on 22 June 2021, 18:13:19 UTC
Irrespective as to whether CONFIG_MODULE_SIG is configured, specifying
"module.sig_enforce=1" on the boot command line sets "sig_enforce".
Only allow "sig_enforce" to be set when CONFIG_MODULE_SIG is configured.
This patch makes the presence of /sys/module/module/parameters/sig_enforce
dependent on CONFIG_MODULE_SIG=y.
Fixes: fda784e50aac ("module: export module signature enforcement status")
Reported-by: Nayna Jain <nayna@linux.ibm.com>
Tested-by: Mimi Zohar <zohar@linux.ibm.com>
Tested-by: Jessica Yu <jeyu@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Jessica Yu <jeyu@kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent a96bfed
| File | Mode | Size |
|---|---|---|
| .gitignore | -rw-r--r-- | 52 bytes |
| Makefile | -rw-r--r-- | 496 bytes |
| asm-offsets.c | -rw-r--r-- | 2.5 KB |
| entry.S | -rw-r--r-- | 8.1 KB |
| h8300_ksyms.c | -rw-r--r-- | 1.2 KB |
| head_ram.S | -rw-r--r-- | 1.0 KB |
| head_rom.S | -rw-r--r-- | 1.7 KB |
| irq.c | -rw-r--r-- | 1.9 KB |
| kgdb.c | -rw-r--r-- | 3.3 KB |
| module.c | -rw-r--r-- | 1.9 KB |
| process.c | -rw-r--r-- | 4.0 KB |
| ptrace.c | -rw-r--r-- | 4.7 KB |
| ptrace_h.c | -rw-r--r-- | 7.2 KB |
| ptrace_s.c | -rw-r--r-- | 951 bytes |
| setup.c | -rw-r--r-- | 4.5 KB |
| signal.c | -rw-r--r-- | 6.9 KB |
| sim-console.c | -rw-r--r-- | 877 bytes |
| syscalls.c | -rw-r--r-- | 320 bytes |
| traps.c | -rw-r--r-- | 3.7 KB |
| vmlinux.lds.S | -rw-r--r-- | 1.0 KB |
Computing file changes ...
