moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "ANDROID: GKI: Disable security lockdown for unsigned modules"

Browse Source 
This reverts commit 1694ef383e.

Reason for revert: Part of old protected/unprotected module implemenation.
It is being replaced by a new design listed as option 2A at
go/gki-modules-build-integration

Bug: 232430739
Test: TH
Signed-off-by: Ramji Jiyani <ramjiyani@google.com>
Change-Id: I2ca2de69317e223adc554edc127016f7adc1fb7b
This commit is contained in:
Ramji Jiyani
2022-09-21 13:52:15 -07:00
parent 94442686bc
commit c09f10c778
1 changed files with 0 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
kernel/module.c
View File

@@ -2960,15 +2960,7 @@ static int module_sig_check(struct load_info *info, int flags)
return -EKEYREJECTED; return -EKEYREJECTED;
} }
/*
* ANDROID: GKI: Do not prevent loading of unsigned modules;
* as all modules except GKI modules are not signed.
*/
#ifndef CONFIG_MODULE_SIG_PROTECT
return security_locked_down(LOCKDOWN_MODULE_SIGNATURE); return security_locked_down(LOCKDOWN_MODULE_SIGNATURE);
#else
return 0;
#endif
} }
#else /* !CONFIG_MODULE_SIG */ #else /* !CONFIG_MODULE_SIG */
static int module_sig_check(struct load_info *info, int flags) static int module_sig_check(struct load_info *info, int flags)