projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4a10c19) | patch
Restrict /dev/mem and /dev/kmem when securelevel is set.
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 9 Mar 2012 14:28:15 +0000 (09:28 -0500)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 30 Mar 2017 01:16:33 +0000 (01:16 +0000)
commitf3362b489e46fefe5e323f876e875eef77b5335f
treed854bfbaffea70a48d6cf1af02a958482dc23337tree | snapshot
parent4a10c19e852610f794cc36f5265af2a40f4bfc1acommit | diff
Restrict /dev/mem and /dev/kmem when securelevel is set.

Allowing users to write to address space provides mechanisms that may permit
modification of the kernel at runtime. Prevent this if securelevel has been
set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
[bwh: Forward-ported to 4.9: adjust context]

Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name restrict-dev-mem-and-dev-kmem-when-securelevel-is-se.patch
drivers/char/mem.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.