projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 23acfde) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Mon, 18 Feb 2019 12:45:02 +0000 (12:45 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 7 Dec 2019 12:24:06 +0000 (12:24 +0000)
commit239a89afcca3304fb98c2de16654d09245ee1f3f
treeafbca7f22826f6d4f9f6cf003131e826ccbdc5bctree | snapshot
parent23acfde4cdf3188f8d6d6425e0ad0bec1e8efdfecommit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0024-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.