[PATCH Yakkety SRU v2] UBUNTU: [Debian] Suppress module signing for staging drivers
Tim Gardner
tim.gardner at canonical.com
Wed Nov 16 19:42:52 UTC 2016
BugLink: http://bugs.launchpad.net/bugs/1642368
Prevent staging drivers from being loadable in a secure boot environment.
Signed-off-by: Tim Gardner <tim.gardner at canonical.com>
---
v2 - Of course this is a Yakkety patch.
scripts/Makefile.modinst | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/scripts/Makefile.modinst b/scripts/Makefile.modinst
index 07650ee..c03a32b 100644
--- a/scripts/Makefile.modinst
+++ b/scripts/Makefile.modinst
@@ -22,8 +22,10 @@ quiet_cmd_modules_install = INSTALL $@
mkdir -p $(2) ; \
cp $@ $(2) ; \
$(mod_strip_cmd) $(2)/$(notdir $@) ; \
- $(mod_sign_cmd) $(2)/$(notdir $@) $(patsubst %,|| true,$(KBUILD_EXTMOD)) && \
- $(mod_compress_cmd) $(2)/$(notdir $@)
+ if echo "$(2)/$(notdir $@)" | egrep -q "\/drivers\/staging\/" ; \
+ then echo Not signing "$(2)/$(notdir $@)"; \
+ else $(mod_sign_cmd) $(2)/$(notdir $@) $(patsubst %,|| true,$(KBUILD_EXTMOD)) && \
+ $(mod_compress_cmd) $(2)/$(notdir $@); fi
# Modules built outside the kernel source tree go into extra by default
INSTALL_MOD_DIR ?= extra
--
2.7.4
More information about the kernel-team
mailing list