module: printk message when module signature fail taints kernel.
Rusty Russell [Mon, 21 Jan 2013 06:33:02 +0000 (16:33 +1030)]
Reported-by: Chris Samuel <chris@csamuel.org>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

kernel/module.c

index eab0827..e69a5a6 100644 (file)
@@ -3192,8 +3192,13 @@ again:
 
 #ifdef CONFIG_MODULE_SIG
        mod->sig_ok = info->sig_ok;
-       if (!mod->sig_ok)
+       if (!mod->sig_ok) {
+               printk_once(KERN_NOTICE
+                           "%s: module verification failed: signature and/or"
+                           " required key missing - tainting kernel\n",
+                           mod->name);
                add_taint_module(mod, TAINT_FORCED_MODULE);
+       }
 #endif
 
        /* Now module is in final location, initialize linked lists, etc. */