Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to disable Kernel Module Signing in linux

I'm working with a real time scheduler developed at my university and when I run it I get "module verification failed: signature and/or required key missing - tainting kernel". I've learned that it might be because of some kernel module signing. Is it possible to dissable this on my ubuntu? I'm using ubuntu with VMplayer.

like image 573
Dave Avatar asked Apr 22 '15 18:04

Dave


People also ask

How do I disable kernel modules?

Removing a module from the kernel You can remove a module from the running kernel with the sudo modprobe -r <module_name> command. You will get a warning if it's being used and the module will not be unloaded.

What is kernel module signing?

The kernel module signing facility cryptographically signs modules during installation and then checks the signature upon loading the module. This allows increased kernel security by disallowing the loading of unsigned modules or modules signed with an invalid key.

How do I prevent a kernel module from loading automatically?

In order to prevent kernel modules loading during boot, the module name must be added to a configuration file for the "modprobe" utility. This file must reside in /etc/modprobe. d . Ensure the module is not configured to get loaded in either /etc/modprobe.

How can I tell if a kernel module is signed?

1 Answer. All kernel modules that are signed will have ~Module signature appended~\n appended to the end of the file. (Source) To find out if there are any unsigned kernel modules, you can simply search for all *.


1 Answers

Module signing is enabled within the kernel configuration file starting from kernel version 3.7, you can disable it by running make menuconfig within the kernel source directory and deselecting the Module Signature verification option within the Enable loadable kernel module menu option. After this you will have to recompile your kernel.

like image 127
bawejakunal Avatar answered Oct 09 '22 23:10

bawejakunal