projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f81db7) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 16:14:12 +0000 (16:14 +0000)
committerRaspbian forward porter <root@raspbian.org>
Sat, 5 May 2018 11:51:50 +0000 (12:51 +0100)
commit08b7bae9259fa5949a869ff418acef8b839944c1
tree6a94324e686060cd15d96c0d22e92982da1aa409tree | snapshot
parent3f81db7ed5d506a19bf3c6f706ddea0140044627commit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0026-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.