Re: [PATCH V34 19/29] Lock down module params that specify hardware parameters (eg. ioport)

[Matthew Garrett]

On Wed, Jun 26, 2019 at 6:49 PM Daniel Axtens <dja@xxxxxxxxxx> wrote:
>
> Matthew Garrett <matthewgarrett@xxxxxxxxxx> writes:
> > +     if (kp->flags & KERNEL_PARAM_FL_HWPARAM &&
> > +         security_locked_down(LOCKDOWN_MODULE_PARAMETERS))
> > +             return false;
> > +     return true;
> >  }
>
> Should this test occur before tainting the kernel?

Seems reasonable.