projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b999744) | patch
Restrict /dev/mem and /dev/kmem when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 14 Jan 2018 19:45:05 +0000 (19:45 +0000)
commite6ae1ac0cb85d71b35938429072d2c1c44c2e8a9
tree94aba4b6b3f89169b9ef41a6c612d0fb57dd4de6tree | snapshot
parentb9997441ac96f44e33211e0cd8178814a29f4133commit | diff
Restrict /dev/mem and /dev/kmem when the kernel is locked down

Allowing users to write to address space makes it possible for the kernel to
be subverted, avoiding module loading restrictions.  Prevent this when the
kernel has been locked down.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0042-Restrict-dev-mem-and-dev-kmem-when-the-kernel-is-loc.patch
drivers/char/mem.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.