diff options
| author | Mike Frysinger <vapier@chromium.org> | 2016-09-15 12:16:33 +0200 |
|---|---|---|
| committer | Denys Vlasenko <vda.linux@googlemail.com> | 2016-09-15 12:16:33 +0200 |
| commit | 3a45b87ac36f60962d6d19c592813e186a9e82e6 (patch) | |
| tree | 2b3d2249ff2e558bc92a71f91339474a50a0b596 /selinux/getenforce.c | |
| parent | 7fa799a97d381902ab27556918722a6e2d138b9e (diff) | |
| download | busybox-3a45b87ac36f60962d6d19c592813e186a9e82e6.tar.gz | |
modutils: support finit_module syscall
On some systems like Chromium OS, loading modules from non-verified
filesystems is denied. Only finit_module is allowed because an open
fd is passed which can be checked against a verified location.
Change the module loading code to first attempt finit_module and if
that fails for whatever reason, fall back to the existing logic.
On x86_64, this adds ~80 bytes to modutils/modutils.o and ~68 bytes
to modutils/modprobe-small.o.
Signed-off-by: Mike Frysinger <vapier@chromium.org>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'selinux/getenforce.c')
0 files changed, 0 insertions, 0 deletions