Revision 0c18f29aae7ce3dadd26d8ee3505d07cc982df75 authored by Mimi Zohar on 22 June 2021, 11:36:41 UTC, committed by Linus Torvalds on 22 June 2021, 18:13:19 UTC
Irrespective as to whether CONFIG_MODULE_SIG is configured, specifying
"module.sig_enforce=1" on the boot command line sets "sig_enforce".
Only allow "sig_enforce" to be set when CONFIG_MODULE_SIG is configured.

This patch makes the presence of /sys/module/module/parameters/sig_enforce
dependent on CONFIG_MODULE_SIG=y.

Fixes: fda784e50aac ("module: export module signature enforcement status")
Reported-by: Nayna Jain <nayna@linux.ibm.com>
Tested-by: Mimi Zohar <zohar@linux.ibm.com>
Tested-by: Jessica Yu <jeyu@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Jessica Yu <jeyu@kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent a96bfed
History
File Mode Size
prom
Makefile -rw-r--r-- 302 bytes
Platform -rw-r--r-- 218 bytes
ecc-berr.c -rw-r--r-- 7.3 KB
int-handler.S -rw-r--r-- 7.5 KB
ioasic-irq.c -rw-r--r-- 3.0 KB
kn01-berr.c -rw-r--r-- 4.9 KB
kn02-irq.c -rw-r--r-- 1.6 KB
kn02xa-berr.c -rw-r--r-- 3.7 KB
platform.c -rw-r--r-- 910 bytes
reset.c -rw-r--r-- 749 bytes
setup.c -rw-r--r-- 23.9 KB
tc.c -rw-r--r-- 2.0 KB
time.c -rw-r--r-- 4.8 KB
wbflush.c -rw-r--r-- 2.0 KB

back to top