[LTP] [PATCH] block_dev.c: Skip on Lockdown/Secure Boot

Po-Hsu Lin po-hsu.lin@canonical.com
Fri Jan 9 12:08:15 CET 2026


Following the commit ca9460deef ("fw_load: Skip on Lockdown/Secure Boot")
to take care of:

tst_module.c:139: TINFO: module signature enforcement: off
insmod: ERROR: could not insert module ltp_block_dev.ko: Key was rejected by service
tst_cmd.c:112: TBROK: 'insmod' exited with a non-zero code 1 at tst_cmd.c:112

Signed-off-by: Po-Hsu Lin <po-hsu.lin@canonical.com>
---
 .../device-drivers/block/block_dev_user/block_dev.c       | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/testcases/kernel/device-drivers/block/block_dev_user/block_dev.c b/testcases/kernel/device-drivers/block/block_dev_user/block_dev.c
index cd900d807..631e6da4e 100644
--- a/testcases/kernel/device-drivers/block/block_dev_user/block_dev.c
+++ b/testcases/kernel/device-drivers/block/block_dev_user/block_dev.c
@@ -17,6 +17,7 @@
 
 #include "tst_test.h"
 #include "tst_module.h"
+#include "tst_security.h"
 
 #define MODULE_NAME "ltp_block_dev"
 #define MODULE_NAME_KO	MODULE_NAME ".ko"
@@ -31,6 +32,12 @@ static struct tst_option options[] = {
 	{}
 };
 
+static void setup(void)
+{
+	if (tst_lockdown_enabled() > 0 || tst_secureboot_enabled() > 0)
+		tst_brk(TCONF, "Cannot load unsigned modules in Lockdown/Secure Boot");
+}
+
 static void cleanup(void)
 {
 	if (module_loaded)
@@ -39,6 +46,7 @@ static void cleanup(void)
 
 static void run(unsigned int n)
 {
+	setup();
 	tst_requires_module_signature_disabled();
 
 	/*
-- 
2.43.0



More information about the ltp mailing list