From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932984AbbESNyk (ORCPT ); Tue, 19 May 2015 09:54:40 -0400 Received: from e28smtp04.in.ibm.com ([122.248.162.4]:49709 "EHLO e28smtp04.in.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932961AbbESNyh (ORCPT ); Tue, 19 May 2015 09:54:37 -0400 Message-ID: <1432043655.4510.82.camel@linux.vnet.ibm.com> Subject: Re: [PATCH 1/4] modsign: Abort modules_install when signing fails From: Mimi Zohar To: "Woodhouse, David" Cc: "linux-kernel@vger.kernel.org" , "mmarek@suse.cz" , "keyrings@linux-nfs.org" , "seth.forshee@canonical.com" , "dmitry.kasatkin@gmail.com" , "rusty@rustcorp.com.au" , "dhowells@redhat.com" , "linux-security-module@vger.kernel.org" , "mcgrof@suse.com" , "mjg59@srcf.ucam.org" Date: Tue, 19 May 2015 09:54:15 -0400 In-Reply-To: <1432040237.29806.79.camel@intel.com> References: <20150515123513.16723.96340.stgit@warthog.procyon.org.uk> <1431708779.4727.9.camel@infradead.org> <1431998970.4510.12.camel@linux.vnet.ibm.com> <1432017624.3277.19.camel@intel.com> <1432035900.4510.81.camel@linux.vnet.ibm.com> <1432040237.29806.79.camel@intel.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.12.10 (3.12.10-1.fc21) Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-TM-AS-MML: disable X-Content-Scanned: Fidelis XPS MAILER x-cbid: 15051913-0013-0000-0000-000005507E17 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 2015-05-19 at 12:57 +0000, Woodhouse, David wrote: > On Tue, 2015-05-19 at 07:45 -0400, Mimi Zohar wrote: > > > > /bin/sh: line 1: 22771 Segmentation fault (core dumped) > > scripts/sign-file "sha256" "pkcs11:manufacturer=piv_II;id=%01" > > ./signing_key.x509 /lib/modules/4.1.0-rc1 > > -test+/kernel/net/ipv6/netfilter/ip6table_filter.ko > > /home/zohar/src/kernel/linux-integrity/scripts/Makefile.modinst:35: > > recipe for target 'net/ipv6/netfilter/ip6table_filter.ko' failed > > make[2]: *** [net/ipv6/netfilter/ip6table_filter.ko] Error 139 > > Hm, can you get a backtrace of that? It would be impressive if that > were a bug in the very few lines of code we have in sign-file.c to > handle the engine; I suspect it's more likely to be elsewhere in the > OpenSSL/p11-kit-proxy/OpenSC/pcsc stack. > > It only happens with 'make -j', yes? To be exact, "-j 10". Mimi