module: printk message when module signature fail taints kernel.

Reported-by: Chris Samuel <chris@csamuel.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

module: printk message when module signature fail taints kernel.
Reported-by: Chris Samuel <chris@csamuel.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Rusty Russell
1 parent 9a9284153d
Showing 1 changed file with 6 additions and 1 deletions Side-by-side Diff
kernel/module.c
@@ -3192,8 +3192,13 @@
  
 #ifdef CONFIG_MODULE_SIG
 	mod->sig_ok = info->sig_ok;
-	if (!mod->sig_ok)
+	if (!mod->sig_ok) {
+		printk_once(KERN_NOTICE
+			    "%s: module verification failed: signature and/or"
+			    " required key missing - tainting kernel\n",
+			    mod->name);
 		add_taint_module(mod, TAINT_FORCED_MODULE);
+	}
 #endif
  
 	/* Now module is in final location, initialize linked lists, etc. */
...	...	@@ -3192,8 +3192,13 @@
3192	3192
3193	3193	#ifdef CONFIG_MODULE_SIG
3194	3194	mod->sig_ok = info->sig_ok;
3195		- if (!mod->sig_ok)
	3195	+ if (!mod->sig_ok) {
	3196	+ printk_once(KERN_NOTICE
	3197	+ "%s: module verification failed: signature and/or"
	3198	+ " required key missing - tainting kernel\n",
	3199	+ mod->name);
3196	3200	add_taint_module(mod, TAINT_FORCED_MODULE);
	3201	+ }
3197	3202	#endif
3198	3203
3199	3204	/* Now module is in final location, initialize linked lists, etc. */