ACPI: Limit access to custom_method when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 17 Jul 2017 02:01:21 +0000 (03:01 +0100)
commitd91dab0fd3aa6678f7cd12a2a5ba60a81a0fc0c6
tree8b4e672cc34f2134139d8e567459f927f94da70c
parentc4d69b837bb6b4a1dbea876fbcea8a9f6423fb06
ACPI: Limit access to custom_method when the kernel is locked down

custom_method effectively allows arbitrary access to system memory, making
it possible for an attacker to circumvent restrictions on module loading.
Disable it if the kernel is locked down.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0054-ACPI-Limit-access-to-custom_method-when-the-kernel-i.patch
drivers/acpi/custom_method.c