summaryrefslogtreecommitdiffstats
path: root/efi-lockdown.patch
diff options
context:
space:
mode:
authorLaura Abbott <labbott@redhat.com>2018-06-18 09:44:24 -0700
committerLaura Abbott <labbott@redhat.com>2018-06-18 09:44:24 -0700
commitc60d15178c74e950ef89f9a619746c5aaa98da23 (patch)
tree09bcea5d3c18a003fd214490ce2c1b02e5129974 /efi-lockdown.patch
parentcc77c1e140d02ff5547e188e356174b4b1b18af5 (diff)
downloadkernel-c60d15178c74e950ef89f9a619746c5aaa98da23.tar.gz
kernel-c60d15178c74e950ef89f9a619746c5aaa98da23.tar.xz
kernel-c60d15178c74e950ef89f9a619746c5aaa98da23.zip
Linux v4.18-rc1
Diffstat (limited to 'efi-lockdown.patch')
-rw-r--r--efi-lockdown.patch2
1 files changed, 1 insertions, 1 deletions
diff --git a/efi-lockdown.patch b/efi-lockdown.patch
index a12721802..09b89db58 100644
--- a/efi-lockdown.patch
+++ b/efi-lockdown.patch
@@ -669,7 +669,7 @@ index a6e43a5806a1..9c1709a05037 100644
- }
- /* Not having a signature is only an error if we're strict. */
-- if (err == -ENOKEY && !sig_enforce)
+- if (err == -ENOKEY && !is_module_sig_enforced())
- err = 0;
+ /* We don't permit modules to be loaded into trusted kernels
+ * without a valid signature on them, but if we're not