]> www.infradead.org Git - users/jedix/linux-maple.git/commit
module: Invalidate signatures on force-loaded modules
authorBen Hutchings <ben@decadent.org.uk>
Wed, 27 Apr 2016 23:54:01 +0000 (09:24 +0930)
committerDhaval Giani <dhaval.giani@oracle.com>
Fri, 20 Jan 2017 22:22:08 +0000 (17:22 -0500)
commit3167e89739851344ed25331a91732100d0fef990
tree72c47e81444ea2d2d8006acc5666ba2253399e75
parentf86ee8e9980e6542d22006d7f39e2cf5ab5c496e
module: Invalidate signatures on force-loaded modules

Orabug: 25308135

[ Upstream commit bca014caaa6130e57f69b5bf527967aa8ee70fdd ]

Signing a module should only make it trusted by the specific kernel it
was built for, not anything else.  Loading a signed module meant for a
kernel with a different ABI could have interesting effects.
Therefore, treat all signatures as invalid when a module is
force-loaded.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Cc: stable@vger.kernel.org
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
(cherry picked from commit 6ac9857245bfb71d836f46db817b0c11e3e4bf69)
Signed-off-by: Dhaval Giani <dhaval.giani@oracle.com>
kernel/module.c