[PATCH v4 11/17] module: Move lockdown check into generic module loader

Nicolas Schier nsc at kernel.org
Fri Feb 13 15:14:04 UTC 2026


On Tue, Jan 13, 2026 at 01:28:55PM +0100, Thomas Weißschuh wrote:
> The lockdown check buried in module_sig_check() will not compose well
> with the introduction of hash-based module validation.
> Move it into module_integrity_check() which will work better.
> 
> Signed-off-by: Thomas Weißschuh <linux at weissschuh.net>
> ---
>  kernel/module/main.c    | 6 +++++-
>  kernel/module/signing.c | 3 +--
>  2 files changed, 6 insertions(+), 3 deletions(-)
> 

Reviewed-by: Nicolas Schier <nsc at kernel.org>



More information about the Linux-security-module-archive mailing list