Re: [PATCH v4 11/17] module: Move lockdown check into generic module loader

From: Nicolas Schier

Date: Fri Feb 13 2026 - 11:32:04 EST


On Tue, Jan 13, 2026 at 01:28:55PM +0100, Thomas Weißschuh wrote:
> The lockdown check buried in module_sig_check() will not compose well
> with the introduction of hash-based module validation.
> Move it into module_integrity_check() which will work better.
>
> Signed-off-by: Thomas Weißschuh <linux@xxxxxxxxxxxxxx>
> ---
> kernel/module/main.c | 6 +++++-
> kernel/module/signing.c | 3 +--
> 2 files changed, 6 insertions(+), 3 deletions(-)
>

Reviewed-by: Nicolas Schier <nsc@xxxxxxxxxx>