uswsusp: Disable when securelevel is set
authorMatthew Garrett <mjg59@srcf.ucam.org>
Tue, 3 Sep 2013 15:23:29 +0000 (11:23 -0400)
committerAurelien Jarno <aurel32@debian.org>
Fri, 2 Mar 2018 07:52:22 +0000 (07:52 +0000)
commit8abd472cd3070343c6fcb9cabc379e9dd6e862c3
tree5ed84be33694727d97142bebb5bc2538cd28b573
parentf6d1505f8f1f6437b9285064a9b8423ad23f9375
uswsusp: Disable when securelevel is set

uswsusp allows a user process to dump and then restore kernel state, which
makes it possible to modify the running kernel. Disable this if securelevel
has been set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name uswsusp-disable-when-securelevel-is-set.patch
kernel/power/user.c