Description of problem:

A bug in one of the sanity checks on kernel module files done by the module
signature checking stuff causes it to reject valid .ko files that happen to have
their section headers at the end of the file.  It's pure luck that older tools
haven't produced files with this layout before, and it could bite on future
builds after binutils/elfutils updates.  This bug should be cloned to all the FC
and RHEL release streams that have the module signing code.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Fix attached.