acpi: Limit access to custom_method if securelevel is set
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 9 Mar 2012 13:39:37 +0000 (08:39 -0500)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 6 Aug 2017 04:24:47 +0000 (05:24 +0100)
commit1f17966aa2ed669dba0344f8258ce7427e13dfc7
treeb08d6c718cf4be825f1766396a464cc3d7f53e8e
parentc5c55bd8a2eadaf5798c425fb281e4608ed22c60
acpi: Limit access to custom_method if securelevel is set

custom_method effectively allows arbitrary access to system memory, making
it possible for an attacker to modify the kernel at runtime. Prevent this
if securelevel has been set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name acpi-limit-access-to-custom_method-if-securelevel-is.patch
drivers/acpi/custom_method.c