commands/memrw: Disable memory reading in lockdown mode
authorB Horn <b@horn.uk>
Thu, 18 Apr 2024 19:37:10 +0000 (20:37 +0100)
committerMiao Wang <shankerwangmiao@gmail.com>
Sun, 15 Feb 2026 13:50:20 +0000 (13:50 +0000)
commitb18f00b5b62ead6bbb9eaf7b4382553f97344f1b
tree3789530d591429fb5a3bdbc1af196010038ef9cc
parentd7c7096a5c089364f1cdf0fa2458bef42bd78b8e
commands/memrw: Disable memory reading in lockdown mode

With the rest of module being blocked in lockdown mode it does not make
a lot of sense to leave memory reading enabled. This also goes in par
with disabling the dump command.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-memrw-Disable-memory-reading-in-lockdown-mode.patch
grub-core/commands/memrw.c