projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c008353) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 16:14:12 +0000 (16:14 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 29 Apr 2018 16:09:14 +0000 (17:09 +0100)
commit73172aacbf255969034f7afa3aca1987b4342b6d
treee0c7159dea4808d2faa588697d86e8b68d363155tree | snapshot
parentc0083538ec883751b83f7ee76de76ef5c94f945acommit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0026-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.