ACPI: Limit access to custom_method when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 19 Jun 2017 23:25:45 +0000 (00:25 +0100)
commit01c3dc4b64b816e223fccd6933503ae0de7fa8f4
tree1c5c5780b2d04ba03015f886be5f6973cbdc5129
parent19c316407ae4e841a7e1cf46afb04fb259e35a55
ACPI: Limit access to custom_method when the kernel is locked down

custom_method effectively allows arbitrary access to system memory, making
it possible for an attacker to circumvent restrictions on module loading.
Disable it if the kernel is locked down.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0054-ACPI-Limit-access-to-custom_method-when-the-kernel-i.patch
drivers/acpi/custom_method.c