]> dgit.raspbian.org Git - linux-4.9.git/commit
projects / linux-4.9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6dcd12a) | patch
kexec: Disable at runtime if securelevel has been set.
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 9 Aug 2013 07:33:56 +0000 (03:33 -0400)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 3 Dec 2017 19:41:55 +0000 (19:41 +0000)
commit5cf0afc0db3543e326919f00d3b9a4ed13b36bff
tree068dd1f972fca27411639818356d111be7bb1fa5tree | snapshot
parent6dcd12a9ebea3d9a1ad2ee3af966e9c5dc3e6b41commit | diff
kexec: Disable at runtime if securelevel has been set.

kexec permits the loading and execution of arbitrary code in ring 0, which
permits the modification of the running kernel. Prevent this if securelevel
has been set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name kexec-disable-at-runtime-if-securelevel-has-been-set.patch
kernel/kexec.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.