diff options
| author | Dave Brolley <brolley@redhat.com> | 2009-03-30 15:41:31 -0400 |
|---|---|---|
| committer | Dave Brolley <brolley@redhat.com> | 2009-03-30 15:41:31 -0400 |
| commit | 8f2b14197e7db279434c5b063b755d1121c137de (patch) | |
| tree | e6d335d41fbe085fccac277a5565dd089267db32 /runtime/staprun/modverify.c | |
| parent | 4407fecb4b4e7466b256a26d1bfd63333bf367a2 (diff) | |
| parent | 267a544424be10825c57ea3eaa4d908c818211c7 (diff) | |
| download | systemtap-steved-8f2b14197e7db279434c5b063b755d1121c137de.tar.gz systemtap-steved-8f2b14197e7db279434c5b063b755d1121c137de.tar.xz systemtap-steved-8f2b14197e7db279434c5b063b755d1121c137de.zip | |
Merge branch 'master' of git://sources.redhat.com/git/systemtap
Conflicts:
aclocal.m4
configure
testsuite/aclocal.m4
Also:
2009-03-30 Dave Brolley <brolley@redhat.com>
* nsscommon.c (nssError): Handle SEC_ERROR_BAD_SIGNATURE.
2009-03-30 Dave Brolley <brolley@redhat.com>
* modverify.c (verify_it): Print a message if the module may have been
tampered with.
Diffstat (limited to 'runtime/staprun/modverify.c')
| -rw-r--r-- | runtime/staprun/modverify.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/runtime/staprun/modverify.c b/runtime/staprun/modverify.c index b897d266..688734c0 100644 --- a/runtime/staprun/modverify.c +++ b/runtime/staprun/modverify.c @@ -149,8 +149,11 @@ verify_it (const char *inputName, const char *signatureName, SECKEYPublicKey *pu /* Complete the verification. */ secStatus = VFY_End (vfy); - if (secStatus != SECSuccess) + if (secStatus != SECSuccess) { + fprintf (stderr, "Unable to verify signed module %s. It may have been altered since it was created.\n", inputName); + nssError (); return 0; + } return 1; } |