[PATCH] x86/ima: require signed kernel modules

Mimi Zohar zohar at linux.ibm.com
Tue Feb 5 23:13:26 UTC 2019


On Tue, 2019-02-05 at 13:13 -0800, Luis Chamberlain wrote:
> Also, do we have selftests implemented to ensure we don't regress with
> your changes?

We're working on a regression test.  "modprobe" currently first
attempts to use finit_module, and then falls back to using
init_module.  Before writing a small program to load kernel modules,
are you aware of any that allows you to specify the syscall?

Mimi



More information about the Linux-security-module-archive mailing list