projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 20f3bff) | patch
Lock down kprobes
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Nov 2017 16:14:12 +0000 (16:14 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 6 Sep 2018 14:32:14 +0000 (15:32 +0100)
commitc4d1a2be8d0a9dcc44a4261363c0f82dc3ad6be7
tree3d259d26c767d9db411072bd40587a8f8f6e4f91tree | snapshot
parent20f3bffb5f0ba9556db8cd8c7b50eedfa514bdc5commit | diff
Lock down kprobes

Disallow the creation of kprobes when the kernel is locked down by
preventing their registration.  This prevents kprobes from being used to
access kernel memory, either to make modifications or to steal crypto data.

Reported-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0026-Lock-down-kprobes.patch
kernel/kprobes.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.