projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 82a654d) | patch
Restrict /dev/mem and /dev/kmem when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 30 Oct 2017 15:32:11 +0000 (15:32 +0000)
commit69c74d741f700c1d6bc35c0eccd9735146411bd0
tree762074bceaeef9ae07e673ff5f500ef867523a4ctree | snapshot
parent82a654dff08d00dd1ece27ebbf52375c81bc5c9ccommit | diff
Restrict /dev/mem and /dev/kmem when the kernel is locked down

Allowing users to write to address space makes it possible for the kernel to
be subverted, avoiding module loading restrictions.  Prevent this when the
kernel has been locked down.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0042-Restrict-dev-mem-and-dev-kmem-when-the-kernel-is-loc.patch
drivers/char/mem.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.