From 7a8ac828019daccf7202c27c00773ef7c1b6bb59 Mon Sep 17 00:00:00 2001 From: Josh Boyer Date: Fri, 20 Jun 2014 08:53:24 -0400 Subject: [PATCH] hibernate: Disable when securelevel is set There is currently no way to verify the resume image when returning from hibernate. This might compromise the securelevel trust model, so until we can work with signed hibernate images we disable it in a secure modules environment. Signed-off-by: Josh Boyer Gbp-Pq: Topic features/all/securelevel Gbp-Pq: Name hibernate-disable-when-securelevel-is-set.patch --- kernel/power/hibernate.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kernel/power/hibernate.c b/kernel/power/hibernate.c index b26dbc48c75..1bbf952f586 100644 --- a/kernel/power/hibernate.c +++ b/kernel/power/hibernate.c @@ -29,6 +29,7 @@ #include #include #include +#include #include #include "power.h" @@ -67,7 +68,7 @@ static const struct platform_hibernation_ops *hibernation_ops; bool hibernation_available(void) { - return (nohibernate == 0); + return ((nohibernate == 0) && (get_securelevel() <= 0)); } /** -- 2.30.2