Re: [PATCH 09/27] uswsusp: Disable when the kernel is locked down

From: James Morris
Date: Fri Oct 20 2017 - 19:29:19 EST

Next message: Bart Van Assche: "Re: [bug report] regression bisected to "block: Make most scsi_req_init() calls implicit""
Previous message: James Morris: "Re: [PATCH 07/27] kexec_file: Disable at runtime if securelevel has been set"
In reply to: joeyli: "Re: [PATCH 09/27] uswsusp: Disable when the kernel is locked down"
Next in thread: David Howells: "[PATCH 10/27] PCI: Lock down BAR access when the kernel is locked down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 19 Oct 2017, David Howells wrote:

> From: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
>
> uswsusp allows a user process to dump and then restore kernel state, which
> makes it possible to modify the running kernel. Disable this if the kernel
> is locked down.
>
> Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
> Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

Reviewed-by: James Morris <james.l.morris@xxxxxxxxxx>

--
James Morris
<james.l.morris@xxxxxxxxxx>

Next message: Bart Van Assche: "Re: [bug report] regression bisected to "block: Make most scsi_req_init() calls implicit""
Previous message: James Morris: "Re: [PATCH 07/27] kexec_file: Disable at runtime if securelevel has been set"
In reply to: joeyli: "Re: [PATCH 09/27] uswsusp: Disable when the kernel is locked down"
Next in thread: David Howells: "[PATCH 10/27] PCI: Lock down BAR access when the kernel is locked down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]