Commit 05f408dd authored by Luis R. Rodriguez's avatar Luis R. Rodriguez Committed by Rusty Russell

kernel/module.c: use generic module param operaters for sig_enforce

We're directly checking and modifying sig_enforce when needed instead
of using the generic helpers. This prevents us from generalizing this
helper so that others can use it. Use indirect helpers to allow us
to generalize this code a bit and to make it a bit more clear what
this is doing.

Cc: Rusty Russell <>
Cc: Jani Nikula <>
Cc: Andrew Morton <>
Cc: Kees Cook <>
Cc: Tejun Heo <>
Cc: Ingo Molnar <>
Signed-off-by: default avatarLuis R. Rodriguez <>
Signed-off-by: default avatarRusty Russell <>
parent 9c27847d
......@@ -301,23 +301,25 @@ static bool sig_enforce = false;
static int param_set_bool_enable_only(const char *val,
const struct kernel_param *kp)
int err;
bool test;
int err = 0;
bool new_value;
bool orig_value = *(bool *)kp->arg;
struct kernel_param dummy_kp = *kp;
dummy_kp.arg = &test;
dummy_kp.arg = &new_value;
err = param_set_bool(val, &dummy_kp);
if (err)
return err;
/* Don't let them unset it once it's set! */
if (!test && sig_enforce)
if (!new_value && orig_value)
return -EROFS;
if (test)
sig_enforce = true;
return 0;
if (new_value)
err = param_set_bool(val, kp);
return err;
static const struct kernel_param_ops param_ops_bool_enable_only = {
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment