Comment 8 for bug 1096497

Revision history for this message
Chris Samuel (chris-csamuel) wrote :

Hi there,

Thanks for finding my patch on LKML, two points:

1) The updated reporting has been incorporated upstream for 3.9 by Rusty in commit 64748a2c9062da0c32b59c1b368a86fc4613b1e1.

2) Rusty additionally changed the code so that loading an unsigned module no longer disables lockdep checking in commit 373d4d099761cb1f637bed488ab3871945882273.

The cause of the issue is that *after* doing the module install make-kpkg runs objcopy on the modules to copy out the debug sections for a debug package and then uses objcopy to remove the same debug sections (along with the crypto signatures) from the ones in the main package. :-( I've reported that as Ubuntu bug #1099371 (though my initial diagnosis was incorrect, I've updated it in the comments and will correct the description now).

So until that's fixed all Raring kernels will be tainted on boot due to loading unsigned kernel modules (unless Ubuntu disables CONFIG_MODULE_SIG).