projects / linux-4.9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8026c6b) | patch
kexec: Disable at runtime if securelevel has been set.
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 9 Aug 2013 07:33:56 +0000 (03:33 -0400)
committerSalvatore Bonaccorso <carnil@debian.org>
Fri, 2 Dec 2016 05:35:22 +0000 (05:35 +0000)
commitd8a897080c08994dc9e0fbb8808d449be8741589
tree18fdc06599505adee59a035b20f2322097c8f7detree | snapshot
parent8026c6b693d712b922553b8ec42eac0bcb3e7e65commit | diff
kexec: Disable at runtime if securelevel has been set.

kexec permits the loading and execution of arbitrary code in ring 0, which
permits the modification of the running kernel. Prevent this if securelevel
has been set.

Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name kexec-disable-at-runtime-if-securelevel-has-been-set.patch
kernel/kexec.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.