summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRusty Russell <rusty@rustcorp.com.au>2013-01-21 17:03:02 +1030
committerRusty Russell <rusty@rustcorp.com.au>2013-01-21 17:17:05 +1030
commit64748a2c9062da0c32b59c1b368a86fc4613b1e1 (patch)
treee2f76eb3ec6ca76a8236100e0924a0710e39612e
parent9a9284153d965a57edc7162a8e57c14c97f3a935 (diff)
downloadlinux-3.10-64748a2c9062da0c32b59c1b368a86fc4613b1e1.tar.gz
linux-3.10-64748a2c9062da0c32b59c1b368a86fc4613b1e1.tar.bz2
linux-3.10-64748a2c9062da0c32b59c1b368a86fc4613b1e1.zip
module: printk message when module signature fail taints kernel.
Reported-by: Chris Samuel <chris@csamuel.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
-rw-r--r--kernel/module.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/kernel/module.c b/kernel/module.c
index eab08274ec9..e69a5a68766 100644
--- a/kernel/module.c
+++ b/kernel/module.c
@@ -3192,8 +3192,13 @@ again:
#ifdef CONFIG_MODULE_SIG
mod->sig_ok = info->sig_ok;
- if (!mod->sig_ok)
+ if (!mod->sig_ok) {
+ printk_once(KERN_NOTICE
+ "%s: module verification failed: signature and/or"
+ " required key missing - tainting kernel\n",
+ mod->name);
add_taint_module(mod, TAINT_FORCED_MODULE);
+ }
#endif
/* Now module is in final location, initialize linked lists, etc. */