Lock down /proc/kcore
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 15:11:37 +0000 (15:11 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Fri, 20 Jul 2018 21:08:27 +0000 (22:08 +0100)
commit9559211a1eb36cb51a918834f9fa675c18d306de
tree782354424756d615901471ace18e3d97b48d7089
parent4ac79ee77a3ceb550a591a302dd040322abe46f0
Lock down /proc/kcore

Disallow access to /proc/kcore when the kernel is locked down to prevent
access to cryptographic data.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0025-Lock-down-proc-kcore.patch
fs/proc/kcore.c