Lock down /proc/kcore
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:37 +0000 (15:11 +0000)
committerBastian Blank <waldi@debian.org>
Sun, 16 Dec 2018 18:45:54 +0000 (18:45 +0000)
commit3bd27bc15832a31fff90dc663c752e4c5797f9d2
tree6cd3d818e9a891183b043c22a75a2f5874f01ba7
parentfdc3f1b26c0ec7d48a79ae0ea05d04f5b63155f8
Lock down /proc/kcore

Disallow access to /proc/kcore when the kernel is locked down to prevent
access to cryptographic data.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0025-Lock-down-proc-kcore.patch
fs/proc/kcore.c