Received: by 10.223.185.116 with SMTP id b49csp5863400wrg; Wed, 7 Mar 2018 20:28:54 -0800 (PST) X-Google-Smtp-Source: AG47ELvFkIunl8XZzdum5WPZCCFpyapVplcL62+wDUE938Ic0BMBZFhlficC/3OEDerVNTuEmrCP X-Received: by 10.99.67.1 with SMTP id q1mr3728374pga.365.1520483333900; Wed, 07 Mar 2018 20:28:53 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1520483333; cv=none; d=google.com; s=arc-20160816; b=ExMqvFcRbZ68944jCzU1YRV+DaHF7F5SYyQpJcrVsQW8rvTlGozC3nTJ8rhTb/T/se TWYDkb/LQ5PA4/4HTqmXgr2gt+EZ2VhQWXW7dPsPBGDJIoJoNgEx7tkzSEojyPiTa9Kq sZ8HL4NrQfHdSLkZ2mx098UfpXaJ5aRZ9pj/UeSvOxOaV48TSf0kCvJ+aGpsdYpFSdmD VbDEfVe4n1hpJWY2inUBlxIV9Fto2DywwDu/XdsNbVNW9cxQeqKBGliRLi6uRczX2YLZ KiRdezoSBVvnBpFMH7ab4LJR8nvBl95pj7+MyiKmvJQNuqOpNf20fwcyvTlsCVnyHl3b R4mA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:subject:cc:to:from :arc-authentication-results; bh=zIQBwrOR4PBW18sG4zjL8cVy7IzczMMAjYRy2Cbdj4s=; b=lmmisp/PffmgYJp6NTQJsGhj/29r1lAxv6fS2zbMZAMwHkBOAnH4KU4HDqckHDsZ1I NJuspMYx2bby0XvdHcYCB8K3iStg49fcdkjmrUHStbwfhOg5RVz6CRf7WHNsnAdZPv0e 31AxLigDPk+XSsOZix/CC0ynAh2VxUqRDMAP+vdLZ2wlh1+pAtPaQP3IdrMANA9HE4Bp kXp3+K4CSk0I4CaCnWvv/4dqNqIyR2QvcM1Thm7GVEV846usmrF+YYnbhbYWI+uIEilL DVonw2AF7cD0SKiX4i3iylSnqufXgt1YOGx/bA86OUrBPw+sbdmuVeShr/AT5utwKbG2 VNRA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id m12-v6si10968597pls.74.2018.03.07.20.28.39; Wed, 07 Mar 2018 20:28:53 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934555AbeCHE1K (ORCPT + 99 others); Wed, 7 Mar 2018 23:27:10 -0500 Received: from out30-130.freemail.mail.aliyun.com ([115.124.30.130]:37065 "EHLO out30-130.freemail.mail.aliyun.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750761AbeCHE1J (ORCPT ); Wed, 7 Mar 2018 23:27:09 -0500 X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R101e4;CH=green;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e01e01429;MF=zhang.jia@linux.alibaba.com;NM=1;PH=DS;RN=3;SR=0;TI=SMTPD_---0Sz3uhW2_1520483225; Received: from localhost(mailfrom:zhang.jia@linux.alibaba.com fp:106.11.233.110) by smtp.aliyun-inc.com(127.0.0.1); Thu, 08 Mar 2018 12:27:05 +0800 From: Jia Zhang To: jeyu@kernel.org Cc: linux-kernel@vger.kernel.org, zhang.jia@linux.alibaba.com Subject: [PATCH v2 0/4] modsign enhancement Date: Thu, 8 Mar 2018 12:26:59 +0800 Message-Id: <1520483223-6596-1-git-send-email-zhang.jia@linux.alibaba.com> X-Mailer: git-send-email 1.8.3.1 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This patch series allows to disable module validity enforcement in runtime through /sys/kernel/security/modsign/enforce interface. Assuming CONFIG_MODULE_SIG_FORCE=y, here are the instructions to disable the validity enforcement. # cat /sys/kernel/security/modsign/enforce # echo -n 0 > data # openssl smime -sign -nocerts -noattr -binary -in data \ -inkey -signer -outform der \ -out /sys/kernel/security/modsign/enforce Now enable enforcement again on demand. # echo 1 > /sys/kernel/security/modsign/enforce Changelog: v2: - Support to disable validity enforcement in runtime.