From 156557a3326a58ca51f1dca32df466f2927e50d5 Mon Sep 17 00:00:00 2001 From: Josh Boyer Date: Wed, 8 Nov 2017 15:11:33 +0000 Subject: [PATCH] hibernate: Disable when the kernel is locked down There is currently no way to verify the resume image when returning from hibernate. This might compromise the signed modules trust model, so until we can work with signed hibernate images we disable it when the kernel is locked down. Signed-off-by: Josh Boyer Signed-off-by: David Howells Reviewed-by: "Lee, Chun-Yi" cc: linux-pm@vger.kernel.org Gbp-Pq: Topic features/all/lockdown Gbp-Pq: Name 0009-hibernate-Disable-when-the-kernel-is-locked-down.patch --- kernel/power/hibernate.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/power/hibernate.c b/kernel/power/hibernate.c index abef759de7c..802795becb8 100644 --- a/kernel/power/hibernate.c +++ b/kernel/power/hibernate.c @@ -70,7 +70,7 @@ static const struct platform_hibernation_ops *hibernation_ops; bool hibernation_available(void) { - return (nohibernate == 0); + return nohibernate == 0 && !kernel_is_locked_down("Hibernation"); } /** -- 2.30.2