diff options
| author | vboxsync <vboxsync@cfe28804-0f27-0410-a406-dd0f0b0b656f> | 2023-04-27 14:26:22 +0000 |
|---|---|---|
| committer | vboxsync <vboxsync@cfe28804-0f27-0410-a406-dd0f0b0b656f> | 2023-04-27 14:26:22 +0000 |
| commit | 27630416b46ad67c5aeec6bc762c3d4b92afcc84 (patch) | |
| tree | 9dbf8697d90871f5df08009dec398e3c78cf129c /src/VBox/Additions/linux/installer | |
| parent | 765e23467a087977dfa27ccc824d16397b0cafe1 (diff) | |
| download | VirtualBox-svn-27630416b46ad67c5aeec6bc762c3d4b92afcc84.tar.gz | |
Linux: rcvboxdrv, rcvboxadd: take into account CONFIG_LOCK_DOWN_KERNEL when detecting if kernel in lockdown mode, bugref:10287.
This option is in use by older kernels such as 4.18.0-147.el8.
git-svn-id: https://www.virtualbox.org/svn/vbox/trunk@99550 cfe28804-0f27-0410-a406-dd0f0b0b656f
Diffstat (limited to 'src/VBox/Additions/linux/installer')
| -rwxr-xr-x | src/VBox/Additions/linux/installer/vboxadd.sh | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/VBox/Additions/linux/installer/vboxadd.sh b/src/VBox/Additions/linux/installer/vboxadd.sh index 3e3698b625f..352d0be9c5b 100755 --- a/src/VBox/Additions/linux/installer/vboxadd.sh +++ b/src/VBox/Additions/linux/installer/vboxadd.sh @@ -456,7 +456,8 @@ kernel_requires_module_signature() [ "$(kernel_get_config_opt "$kern_ver" "CONFIG_MODULE_SIG_FORCE")" = "y" ] && requires="1" # Unsigned modules loading is restricted by "lockdown" feature in runtime. - if [ "$(kernel_get_config_opt "$kern_ver" "CONFIG_SECURITY_LOCKDOWN_LSM")" = "y" \ + if [ "$(kernel_get_config_opt "$kern_ver" "CONFIG_LOCK_DOWN_KERNEL")" = "y" \ + -o "$(kernel_get_config_opt "$kern_ver" "CONFIG_SECURITY_LOCKDOWN_LSM")" = "y" \ -o "$(kernel_get_config_opt "$kern_ver" "CONFIG_SECURITY_LOCKDOWN_LSM_EARLY")" = "y" ]; then # Once lockdown level is set to something different from "none" (e.g., "integrity" |