Contents
What does taints kernel mean?
The primary reason for the ‘Tainted: ‘ string is to tell kernel debuggers if this is a clean kernel or if anything unusual has occurred. Tainting is permanent: even if an offending module is unloaded, the tainted value remains to indicate that the kernel is not trustworthy.
Is my kernel tainted?
To know if a running kernel is tainted or not, check the numerical value in the file /proc/sys/kernel/tainted. Non-zero if the kernel has been tainted. Numeric values, which can be checked: 1 – A module with a non-GPL license has been loaded, this includes modules with no license.
What causes a kernel to become tainted?
The use of a proprietary (or non-GPL-compatible) kernel module—this is the most common cause of tainted kernels and usually results from loading proprietary NVIDIA or AMD video drivers. The use of staging drivers, which are part of the kernel source code but are not fully tested.
How to insert a module without tainting the kernel?
I just want to insert a module without tainting the kernel. This is the file test1.c and in the same folder, the file Makefile, as decribed in kernel.org section 3
What does module license’proprietary’taint the kernel?
module license ‘Proprietary’ taints kernel — means the module belongs to third party comapny and not supplied by the OS vendor Disabling lock debugging due to kernel taint — means that the built in OS supplied lock debuging is not turned on
What does it mean when a Linux kernel is tainted?
This indicates that the kernel has been tainted by some mechanism. The string is followed by a series of position-sensitive characters, each representing a particular tainted value. ‘G’ if all modules loaded have a GPL or compatible license, ‘P’ if any proprietary module has been loaded.
What does disabling lock debugging due to kernel taint mean?
Disabling lock debugging due to kernel taint — means that the built in OS supplied lock debuging is not turned on module verification failed: signature and/or required key missing – tainting kernel — means that this module version was not code signed with a PKI certificate or that certificate was not imported into the system.