Changeset 98565 in vbox

Timestamp:

Feb 14, 2023 3:37:37 PM (22 months ago)

Author:

vboxsync

Message:

Linux: rcvboxdrv: Allow to bypass forced kernel modules signature validation, bugref:10287.

Added a tweak which allows to bypass modules signature validation for distributions
which do not provide tools for that. Administrator should explicitly add:

VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1"

into /etc/vbox/vbox.cfg in order to enable this tweak.

File:

• trunk/src/VBox/Installer/linux/vboxdrv.sh (modified) (1 diff)

trunk/src/VBox/Installer/linux/vboxdrv.sh

@@ -388 +388 @@
     mod="$1"
     [ -n "$mod" ] || return
+
+    # Be nice with distributions which do not provide tools which we
+    # use in order to verify module signature. This variable needs to
+    # be explicitly set by administrator. This script will look for it
+    # in /etc/vbox/vbox.cfg. Make sure that you know what you do!
+    if [ "$VBOX_BYPASS_MODULES_SIGNATURE_CHECK" = "1" ]; then
+        echo "1"
+        return
+    fi
 
     extraction_tool=/lib/modules/"$(uname -r)"/build/scripts/extract-module-sig.pl