Tree - rpms/kernel - src.fedoraproject.org

Blob History Raw

		9472421	`From 71db1b222ecdf6cb4356f6f1e2bd45cd2f0e85e1 Mon Sep 17 00:00:00 2001`
		9472421	`From: Laura Abbott <labbott@redhat.com>`
		9472421	`Date: Tue, 18 Oct 2016 13:58:44 -0700`
		9472421	`Subject: [PATCH] MODSIGN: Don't try secure boot if EFI runtime is disabled`
		9472421
		9472421	`Secure boot depends on having EFI runtime variable access. The code`
		9472421	`does not handle a lack of runtime variables gracefully. Add a check`
		9472421	`to just bail out of EFI runtime is disabled.`
		9472421
		9472421	`Signed-off-by: Laura Abbott <labbott@redhat.com>`
		9472421	`---`
		9472421	`kernel/modsign_uefi.c \| 4 ++++`
		9472421	`1 file changed, 4 insertions(+)`
		9472421
		9472421	`diff --git a/kernel/modsign_uefi.c b/kernel/modsign_uefi.c`
		9472421	`index a41da14..2bdaf76 100644`
		9472421	`--- a/kernel/modsign_uefi.c`
		9472421	`+++ b/kernel/modsign_uefi.c`
		9472421	`@@ -71,6 +71,10 @@ static int __init load_uefi_certs(void)`
		9472421	`if (!efi_enabled(EFI_SECURE_BOOT))`
		9472421	`return 0;`
		9472421
		9472421	`+ /* Things blow up if efi runtime is disabled */`
		9472421	`+ if (efi_runtime_disabled())`
		9472421	`+ return 0;`
		9472421	`+`
		9472421	`keyring = get_system_keyring();`
		9472421	`if (!keyring) {`
		9472421	`pr_err("MODSIGN: Couldn't get system keyring\n");`
		9472421	`--`
		9472421	`2.7.4`
		9472421