Messages in this thread | | | From | Jessica Yu <> | Subject | [PATCH 0/3] lockdown/module: make module name available for module_sig_check() | Date | Wed, 30 May 2018 11:08:27 +0200 |
| |
Hi David,
The changes here involve cleaning up load_module() (patches 1 and 2) in preparation for patch 3. The general idea is to do some preliminary module section parsing and set up load info convenience variables earlier so that we could log the module name during the module signature verification check if it fails. Right now the module name is not logged if signature verification fails, and it would be helpful to know which module failed loading.
Currently, all patches are based on the lockdown tree:
http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=lockdown
But my plan is probably to take patches 1 and 2 through the modules-next tree as they are generic cleanups, but I wanted to give you a heads up for patch 3, which should probably be taken through the lockdown tree.
Thanks!
Jessica
--- Jessica Yu (3): module: make it clear when we're handling the module copy in info->hdr module: setup load info before module_sig_check() modsign: print module name along with error message
kernel/module.c | 105 ++++++++++++++++++++++++++++++-------------------------- 1 file changed, 57 insertions(+), 48 deletions(-)
-- 2.16.3
| |