From 32e70864a6c6507879bab7b190357543f215b6b9 Mon Sep 17 00:00:00 2001 From: David Howells Date: Wed, 28 Feb 2018 14:43:03 +0000 Subject: [PATCH] lockdown: Print current->comm in restriction messages Print the content of current->comm in messages generated by lockdown to indicate a restriction that was hit. This makes it a bit easier to find out what caused the message. The message now patterned something like: Lockdown: : is restricted; see man kernel_lockdown.7 Signed-off-by: David Howells Gbp-Pq: Topic features/all/lockdown Gbp-Pq: Name 0030-lockdown-Print-current-comm-in-restriction-messages.patch --- security/lock_down.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/security/lock_down.c b/security/lock_down.c index 527f7e51dc8..4745278e0f3 100644 --- a/security/lock_down.c +++ b/security/lock_down.c @@ -60,8 +60,8 @@ void __init init_lockdown(void) bool __kernel_is_locked_down(const char *what, bool first) { if (what && first && kernel_locked_down) - pr_notice("Lockdown: %s is restricted; see man kernel_lockdown.7\n", - what); + pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n", + current->comm, what); return kernel_locked_down; } EXPORT_SYMBOL(__kernel_is_locked_down); -- 2.30.2