projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c80e8c1) | patch
Restrict /dev/mem and /dev/kmem when securelevel is set.
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 9 Mar 2012 14:28:15 +0000 (09:28 -0500)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 4 Jun 2017 02:03:01 +0000 (02:03 +0000)
commit90b871038098602cdce671597aa899301676149a
tree15652dd3e46237dd50bd2e1e79718922168f7ab9tree | snapshot
parentc80e8c1d93b2fc0262cc0f8e1141585d3e7262cfcommit | diff
Restrict /dev/mem and /dev/kmem when securelevel is set.

Allowing users to write to address space provides mechanisms that may permit
modification of the kernel at runtime. Prevent this if securelevel has been
set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
[bwh: Forward-ported to 4.9: adjust context]

Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name restrict-dev-mem-and-dev-kmem-when-securelevel-is-se.patch
drivers/char/mem.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.