Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sig_unenforce kernel patch for the AWS kernel #2768

Closed
VivekPanyam opened this issue Nov 14, 2022 · 4 comments
Closed

sig_unenforce kernel patch for the AWS kernel #2768

VivekPanyam opened this issue Nov 14, 2022 · 4 comments

Comments

@VivekPanyam
Copy link

Hello!

The documentation says to use the sig_unenforce kernel command line parameter to disable signature checking of kernel modules. This works correctly on the LTS kernel, but not on the AWS one.

It looks like the kernel patch that enables this parameter is not part of the AWS kernel build.

Is there a reason it's not included in the AWS kernel? If not, can that patch be added? Thank you!


References:

@bwarden
Copy link
Member

bwarden commented Nov 14, 2022

Looks like that was inadvertently dropped in a patch cleanup a while back. I'll add it back in. This issue will be tagged when the fix has landed in a release.

@VivekPanyam
Copy link
Author

Thank you! Do you have a rough estimate of how long that'll take?

@bwarden
Copy link
Member

bwarden commented Nov 14, 2022

Within a week, possibly less than that. I think we do releases about twice a week, but only publish them if they pass testing. I tagged this issue in the commit, so when it's published to https://github.com/clearlinux-pkgs/linux-aws (automatic, shortly after release) this issue will be tagged/closed.

clrpackages pushed a commit to clearlinux-pkgs/linux-aws that referenced this issue Nov 15, 2022
Allows disabling module signature verification, necessary for loading
modules built out of tree, e.g. DKMS.

Fixes clearlinux/distribution#2768
@bwarden
Copy link
Member

bwarden commented Nov 19, 2022

Fixed in releases >=37630

@bwarden bwarden closed this as completed Nov 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants