projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2d4f8fc) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 16:14:12 +0000 (16:14 +0000)
committerBastian Blank <waldi@debian.org>
Mon, 13 Aug 2018 13:33:58 +0000 (14:33 +0100)
commit04f853074a0b375d16c95480899ca48235a2f5f5
tree1a80f1ad48a8db00f047183de83eb3c5c249eda6tree | snapshot
parent2d4f8fc64ea1ce8331cd710197a52f6bcf13f3dbcommit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0026-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.