diff options
| author | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-04-11 11:53:34 +0800 |
|---|---|---|
| committer | Jessica Yu <jeyu@kernel.org> | 2018-04-16 23:49:33 +0200 |
| commit | c554b89868015d86cd330d9cc10656c3756352a5 (patch) | |
| tree | cfce5c199a75d18d9a45f8969cba9544b59f2c68 /kernel/module.c | |
| parent | 2c8fd268f41884bef5d37acda08d8006dc7da0ea (diff) | |
module: Allow to always show the status of modsign
The sig_enforce parameter could be always shown to reflect the current
status of signature enforcement. For the case of
CONFIG_MODULE_SIG_FORCE=y, this modification doesn't do anything, since
sig_enforce can only be enabled, and not disabled, even via the kernel
cmdline.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
[jeyu: reworded commit message to provide clarification]
Signed-off-by: Jessica Yu <jeyu@kernel.org>
Diffstat (limited to 'kernel/module.c')
| -rw-r--r-- | kernel/module.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/kernel/module.c b/kernel/module.c index f6954745848e..1e3337bcf1e7 100644 --- a/kernel/module.c +++ b/kernel/module.c @@ -274,9 +274,7 @@ static void module_assert_mutex_or_preempt(void) } static bool sig_enforce = IS_ENABLED(CONFIG_MODULE_SIG_FORCE); -#ifndef CONFIG_MODULE_SIG_FORCE module_param(sig_enforce, bool_enable_only, 0644); -#endif /* !CONFIG_MODULE_SIG_FORCE */ /* * Export sig_enforce kernel cmdline parameter to allow other subsystems rely |