uswsusp: Disable when securelevel is set
authorMatthew Garrett <mjg59@srcf.ucam.org>
Tue, 3 Sep 2013 15:23:29 +0000 (11:23 -0400)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 6 Aug 2017 04:24:47 +0000 (05:24 +0100)
commit1ddf6638456b9dd2c215b7b25ea50abdcc92b53c
tree38170643740d43d7801c487bb7957be738b68eab
parent5d422bdb2d3106c35d8889c9434177dd1894c2b8
uswsusp: Disable when securelevel is set

uswsusp allows a user process to dump and then restore kernel state, which
makes it possible to modify the running kernel. Disable this if securelevel
has been set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name uswsusp-disable-when-securelevel-is-set.patch
kernel/power/user.c