lkml.org 
[lkml]   [2013]   [Sep]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH V3 01/11] Add secure_modules() call
    On Tue, 3 Sep 2013, Matthew Garrett wrote:

    > Provide a single call to allow kernel code to determine whether the system
    > has been configured to either disable module loading entirely or to load
    > only modules signed with a trusted key.
    >
    > Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>

    Reviewed-by: James Morris <jmorris@namei.org>


    > ---
    > include/linux/module.h | 7 +++++++
    > kernel/module.c | 10 ++++++++++
    > 2 files changed, 17 insertions(+)
    >
    > diff --git a/include/linux/module.h b/include/linux/module.h
    > index 46f1ea0..0c266b2 100644
    > --- a/include/linux/module.h
    > +++ b/include/linux/module.h
    > @@ -509,6 +509,8 @@ int unregister_module_notifier(struct notifier_block * nb);
    >
    > extern void print_modules(void);
    >
    > +extern bool secure_modules(void);
    > +
    > #else /* !CONFIG_MODULES... */
    >
    > /* Given an address, look for it in the exception tables. */
    > @@ -619,6 +621,11 @@ static inline int unregister_module_notifier(struct notifier_block * nb)
    > static inline void print_modules(void)
    > {
    > }
    > +
    > +static inline bool secure_modules(void)
    > +{
    > + return false;
    > +}
    > #endif /* CONFIG_MODULES */
    >
    > #ifdef CONFIG_SYSFS
    > diff --git a/kernel/module.c b/kernel/module.c
    > index 2069158..0e94acf 100644
    > --- a/kernel/module.c
    > +++ b/kernel/module.c
    > @@ -3852,3 +3852,13 @@ void module_layout(struct module *mod,
    > }
    > EXPORT_SYMBOL(module_layout);
    > #endif
    > +
    > +bool secure_modules(void)
    > +{
    > +#ifdef CONFIG_MODULE_SIG
    > + return (sig_enforce || modules_disabled);
    > +#else
    > + return modules_disabled;
    > +#endif
    > +}
    > +EXPORT_SYMBOL(secure_modules);
    > --
    > 1.8.3.1
    >
    > --
    > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    > the body of a message to majordomo@vger.kernel.org
    > More majordomo info at http://vger.kernel.org/majordomo-info.html
    > Please read the FAQ at http://www.tux.org/lkml/
    >

    --
    James Morris
    <jmorris@namei.org>


    \
     
     \ /
      Last update: 2013-09-04 03:01    [W:4.374 / U:0.200 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site