2

Linux can be configured to require that kernel modules be digitally signed. On kernels built for embedded devices and consumer devices (i.e., tablets, smartphones, etc.), I can still see that this leaves a hole open for using modules made for older releases to exploit newer ones if both kernels use the same key. Does Linux provide a facility for refusing to load kernel modules from a different version?

1

Unless you select CONFIG_MODVERSIONS, the kernel will refuse loading a module that has not been compiled for itself. Also, ensure CONFIG_MODULE_FORCE_LOAD is not selected.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.