projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5a6db63) | patch
commands/memrw: Disable memory reading in lockdown mode
authorB Horn <b@horn.uk>
Thu, 18 Apr 2024 19:37:10 +0000 (20:37 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Thu, 3 Jul 2025 16:35:51 +0000 (18:35 +0200)
commit9e84f9821afd99bc4f156a65242e52da6fdb0faa
tree2513effe9c60b23a4028f0056e36c0a9671b4cc3tree | snapshot
parent5a6db63d68d95d47954eeec01ec0ad87d8c7f202commit | diff
commands/memrw: Disable memory reading in lockdown mode

With the rest of module being blocked in lockdown mode it does not make
a lot of sense to leave memory reading enabled. This also goes in par
with disabling the dump command.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-memrw-Disable-memory-reading-in-lockdown-mode.patch
grub-core/commands/memrw.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.