|
@@ -274,9 +274,7 @@ static void module_assert_mutex_or_preempt(void)
|
|
|
}
|
|
|
|
|
|
static bool sig_enforce = IS_ENABLED(CONFIG_MODULE_SIG_FORCE);
|
|
|
-#ifndef CONFIG_MODULE_SIG_FORCE
|
|
|
module_param(sig_enforce, bool_enable_only, 0644);
|
|
|
-#endif /* !CONFIG_MODULE_SIG_FORCE */
|
|
|
|
|
|
/*
|
|
|
* Export sig_enforce kernel cmdline parameter to allow other subsystems rely
|
|
@@ -2785,7 +2783,7 @@ static int module_sig_check(struct load_info *info, int flags)
|
|
|
}
|
|
|
|
|
|
/* Not having a signature is only an error if we're strict. */
|
|
|
- if (err == -ENOKEY && !sig_enforce)
|
|
|
+ if (err == -ENOKEY && !is_module_sig_enforced())
|
|
|
err = 0;
|
|
|
|
|
|
return err;
|