summaryrefslogtreecommitdiffstats
path: root/efi-lockdown.patch
diff options
context:
space:
mode:
Diffstat (limited to 'efi-lockdown.patch')
-rw-r--r--efi-lockdown.patch2
1 files changed, 1 insertions, 1 deletions
diff --git a/efi-lockdown.patch b/efi-lockdown.patch
index a12721802..09b89db58 100644
--- a/efi-lockdown.patch
+++ b/efi-lockdown.patch
@@ -669,7 +669,7 @@ index a6e43a5806a1..9c1709a05037 100644
- }
- /* Not having a signature is only an error if we're strict. */
-- if (err == -ENOKEY && !sig_enforce)
+- if (err == -ENOKEY && !is_module_sig_enforced())
- err = 0;
+ /* We don't permit modules to be loaded into trusted kernels
+ * without a valid signature on them, but if we're not