]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blobdiff - kernel/module_signing.c
watch_queue: Free the page array when watch_queue is dismantled
[mirror_ubuntu-jammy-kernel.git] / kernel / module_signing.c
index 8723ae70ea1fe4029a52587032f47dede603096d..fb2d773498c2875c261d52249c4c4fac50de4757 100644 (file)
@@ -38,8 +38,15 @@ int mod_verify_sig(const void *mod, struct load_info *info)
        modlen -= sig_len + sizeof(ms);
        info->len = modlen;
 
-       return verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
+       ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
                                      VERIFY_USE_SECONDARY_KEYRING,
                                      VERIFYING_MODULE_SIGNATURE,
                                      NULL, NULL);
+       if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {
+               ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
+                               VERIFY_USE_PLATFORM_KEYRING,
+                               VERIFYING_MODULE_SIGNATURE,
+                               NULL, NULL);
+       }
+       return ret;
 }