projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 81739fd) | patch
commands/memrw: Disable memory reading in lockdown mode
authorB Horn <b@horn.uk>
Thu, 18 Apr 2024 19:37:10 +0000 (20:37 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Wed, 11 Jun 2025 15:42:34 +0000 (17:42 +0200)
commit19b6d2a562dd7e4c5a188fc118a20c22eb6379c3
tree03a8198d3abe6cf70f9f8f252495bb2ff1ecedc1tree | snapshot
parent81739fd9681a6548ebda104e65706e79c8576907commit | diff
commands/memrw: Disable memory reading in lockdown mode

With the rest of module being blocked in lockdown mode it does not make
a lot of sense to leave memory reading enabled. This also goes in par
with disabling the dump command.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-memrw-Disable-memory-reading-in-lockdown-mode.patch
grub-core/commands/memrw.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.