Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 16:14:12 +0000 (16:14 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 17 Jan 2019 18:56:17 +0000 (18:56 +0000)
commit9a78f02d60d38e145c670e10cee56d881d1cdfc8
tree046550358e05c577ac00f8fc274e9046185d2473
parent92a06ed9152edae80e51d73941fb3d6f706e8f3e
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0026-Lock-down-kprobes.patch
kernel/kprobes.c