[PATCH v3 7/9] module: Move lockdown check into generic module loader

Paul Moore paul at paul-moore.com
Thu Nov 20 06:55:47 AEDT 2025


On Wed, Nov 19, 2025 at 6:20 AM Sebastian Andrzej Siewior
<bigeasy at linutronix.de> wrote:
> On 2025-04-29 15:04:34 [+0200], Thomas Weißschuh wrote:
> > The lockdown check buried in module_sig_check() will not compose well
> > with the introduction of hash-based module validation.
>
> An explanation of why would be nice.

/me shrugs

I thought the explanation was sufficient.

> > Move it into module_integrity_check() which will work better.
> >
> > Signed-off-by: Thomas Weißschuh <linux at weissschuh.net>

-- 
paul-moore.com


More information about the Linuxppc-dev mailing list