Open ptalbert opened 9 years ago
@ptalbert can you give me a sosreport that has some unsigned modules?
For RHEL6 & below, steps could look like this:
drivers=$(awk '/^driver:/{print $2}' sos_commands/networking/ethtool_-i_* | sort -u)
for driver in ${drivers}; do grep "^filename: .*${driver}.ko" sos_commands/kernel/modinfo_*; done
/lib/modules/$(uname -r)/kernel/drivers/net/${driver).ko
Looks like RHEL7 added signer:
and sig_key:
to modinfo
output so we could take advantage of that too.
The ethtool output currently shows (among others) the driver and firmware information per interface. It would be useful for it to somehow flag the driver output when an unsigned module is being used.
This information could be gathered from the modinfo output provided by the kernel sosreport module.