ACPI: Limit access to custom_method when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 8 Nov 2017 15:11:34 +0000 (15:11 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 22 Dec 2018 08:06:45 +0000 (08:06 +0000)
commit773dc0c1da6f3b68848277ac3e9924703d80c6a6
treea3b2e479b1a2109a3a7a2a7c43d5d46be98ef717
parent798dcbb8bab36dcb513a4f80d72fe7cbbbd30457
ACPI: Limit access to custom_method when the kernel is locked down

custom_method effectively allows arbitrary access to system memory, making
it possible for an attacker to circumvent restrictions on module loading.
Disable it if the kernel is locked down.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
cc: linux-acpi@vger.kernel.org

Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0015-ACPI-Limit-access-to-custom_method-when-the-kernel-i.patch
drivers/acpi/custom_method.c