Kernel not enforcing module signatures under SecureBoot
Bug #1658255 reported by
Kees Cook
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
In Progress
|
Undecided
|
Unassigned | ||
Yakkety |
Won't Fix
|
Undecided
|
Unassigned | ||
Zesty |
In Progress
|
Undecided
|
Unassigned |
Bug Description
$ sudo mokutil --sbstate
SecureBoot enabled
$ cat /proc/sys/
0
$ sudo insmod ./hello.ko
$ echo $?
0
$ dmesg | grep Hello
[00112.530866] Hello, world!
$ strings /lib/modules/
~Module signature appended~
$ strings hello.ko | grep signature
$ uname -r
4.8.0-34-generic
Changed in linux (Ubuntu): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Changed in linux (Ubuntu Yakkety): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Changed in linux (Ubuntu Zesty): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
To post a comment you must log in.
This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:
apport-collect 1658255
and then change the status of the bug to 'Confirmed'.
If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.
This change has been made by an automated script, maintained by the Ubuntu Kernel Team.