Re: [PATCH v2] module: Allow to disable modsign in kernel cmdline

[Randy Dunlap]

Hi,

On 4/27/20 10:05 PM, Tianjia Zhang wrote:
> diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
> index 7bc83f3d9bdf..00ed7566959f 100644
> --- a/Documentation/admin-guide/kernel-parameters.txt
> +++ b/Documentation/admin-guide/kernel-parameters.txt
> @@ -3190,6 +3190,12 @@
>  	noirqdebug	[X86-32] Disables the code which attempts to detect and
>  			disable unhandled interrupt sources.
>  
> +	no_modsig_enforce
> +			[KNL] When CONFIG_MODULE_SIG_FORCE is set, this option
> +			allows to disable modsign completely at the beginning.
> +			This means that modules without (valid) signatures will
> +			success to load.

			succeed to load.

			succeed in loading.

			load successfully.
I prefer this one.....  ^^^^^^^^^^^^^^^^^^^^^

			be loaded successfully.


> +
>  	no_timer_check	[X86,APIC] Disables the code which tests for
>  			broken timer IRQ sources.
>  

thanks.
-- 
~Randy