ANDROID: module loader: don't taint kernel when CONFIG_MODULE_SIG_PROTECT is enabled
When signed module protection is enabled, do not taint the kernel upon loading an unsigned module. Bug: 519119852 Change-Id: I10a776984efd420d2fbd9d75ccd9c85b1bf50e9d Signed-off-by: Siddharth Nayyar <sidnayyar@google.com>
This commit is contained in:
1 parent
8d2b579031
commit
bb790f79d7
1 file changed
+2
@@ -2636,12 +2636,14 @@ static void module_augment_kernel_taints(struct module *mod, struct load_info *i
|
||||
}
|
||||
#ifdef CONFIG_MODULE_SIG
|
||||
mod->sig_ok = info->sig_ok;
|
||||
#ifndef CONFIG_MODULE_SIG_PROTECT
|
||||
if (!mod->sig_ok) {
|
||||
pr_notice_once("%s: module verification failed: signature "
|
||||
"and/or required key missing - tainting "
|
||||
"kernel\n", mod->name);
|
||||
add_taint_module(mod, TAINT_UNSIGNED_MODULE, LOCKDEP_STILL_OK);
|
||||
}
|
||||
#endif
|
||||
#endif
|
||||
|
||||
/*
|
||||
|
||||
Reference in new issue
Block a user