linux-kernel - Re: [PATCH v2] module: Allow to disable modsign in kernel cmdline

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <aecb37fd-e99e-c6e2-ac80-ccf1ae2b0295@linux.alibaba.com>
Date:   Tue, 28 Apr 2020 14:01:37 +0800
From:   Tianjia Zhang <tianjia.zhang@...ux.alibaba.com>
To:     Randy Dunlap <rdunlap@...radead.org>, jeyu@...nel.org,
        corbet@....net, mchehab+samsung@...nel.org, tglx@...utronix.de,
        akpm@...ux-foundation.org, gregkh@...uxfoundation.org,
        pawan.kumar.gupta@...ux.intel.com, jgross@...e.com
Cc:     linux-kernel@...r.kernel.org, linux-doc@...r.kernel.org
Subject: Re: [PATCH v2] module: Allow to disable modsign in kernel cmdline



On 2020/4/28 13:52, Randy Dunlap wrote:
> Hi,
> 
> On 4/27/20 10:05 PM, Tianjia Zhang wrote:
>> diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
>> index 7bc83f3d9bdf..00ed7566959f 100644
>> --- a/Documentation/admin-guide/kernel-parameters.txt
>> +++ b/Documentation/admin-guide/kernel-parameters.txt
>> @@ -3190,6 +3190,12 @@
>>   	noirqdebug	[X86-32] Disables the code which attempts to detect and
>>   			disable unhandled interrupt sources.
>>   
>> +	no_modsig_enforce
>> +			[KNL] When CONFIG_MODULE_SIG_FORCE is set, this option
>> +			allows to disable modsign completely at the beginning.
>> +			This means that modules without (valid) signatures will
>> +			success to load.
> 
> 			succeed to load.
> 
> 			succeed in loading.
> 
> 			load successfully.
> I prefer this one.....  ^^^^^^^^^^^^^^^^^^^^^
> 
> 			be loaded successfully.
> 
> 
>> +
>>   	no_timer_check	[X86,APIC] Disables the code which tests for
>>   			broken timer IRQ sources.
>>   
> 
> thanks.
> 

v3 patch has been submitted, thank you for your suggestion.

Thanks,
Tianjia