projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 07f61eb) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Mon, 18 Feb 2019 12:45:02 +0000 (12:45 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 19 Nov 2019 01:43:33 +0000 (01:43 +0000)
commit6e75b80f64c909fcb6ec64a3e0550c73a057a58e
treee3d06f15f622313d072bbdff5f0b49ff52bd1152tree | snapshot
parent07f61ebbd7e17322083b6259d48c253b3b8512ffcommit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0024-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.