提交 de7f01c2 编写于 作者: L Linus Torvalds

Merge tag 'modules-for-v4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/jeyu/linux

Pull module updates from Jessica Yu:
 "Minor code cleanup and also allow sig_enforce param to be shown in
  sysfs with CONFIG_MODULE_SIG_FORCE"

* tag 'modules-for-v4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/jeyu/linux:
  module: Allow to always show the status of modsign
  module: Do not access sig_enforce directly
...@@ -274,9 +274,7 @@ static void module_assert_mutex_or_preempt(void) ...@@ -274,9 +274,7 @@ static void module_assert_mutex_or_preempt(void)
} }
static bool sig_enforce = IS_ENABLED(CONFIG_MODULE_SIG_FORCE); static bool sig_enforce = IS_ENABLED(CONFIG_MODULE_SIG_FORCE);
#ifndef CONFIG_MODULE_SIG_FORCE
module_param(sig_enforce, bool_enable_only, 0644); module_param(sig_enforce, bool_enable_only, 0644);
#endif /* !CONFIG_MODULE_SIG_FORCE */
/* /*
* Export sig_enforce kernel cmdline parameter to allow other subsystems rely * Export sig_enforce kernel cmdline parameter to allow other subsystems rely
...@@ -2785,7 +2783,7 @@ static int module_sig_check(struct load_info *info, int flags) ...@@ -2785,7 +2783,7 @@ static int module_sig_check(struct load_info *info, int flags)
} }
/* Not having a signature is only an error if we're strict. */ /* Not having a signature is only an error if we're strict. */
if (err == -ENOKEY && !sig_enforce) if (err == -ENOKEY && !is_module_sig_enforced())
err = 0; err = 0;
return err; return err;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册