Matthew Garrett f474e1486b ACPI: Limit access to custom_method when the kernel is locked down ...

custom_method effectively allows arbitrary access to system memory, making
it possible for an attacker to circumvent restrictions on module loading.
Disable it if the kernel is locked down.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
cc: linux-acpi@vger.kernel.org
Signed-off-by: James Morris <jmorris@namei.org>

2019-08-19 21:54:16 -07:00

..

acpi

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

asm-generic

security: Support early LSMs

2019-08-19 21:54:15 -07:00

clocksource

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234

2019-06-19 17:09:07 +02:00

crypto

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

drm

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

dt-bindings

Merge tag 'riscv-for-v5.2/fixes-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2019-06-29 17:04:21 +08:00

keys

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

kvm

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234

2019-06-19 17:09:07 +02:00

linux

ACPI: Limit access to custom_method when the kernel is locked down

2019-08-19 21:54:16 -07:00

math-emu

math-emu: Use statement expressions to fix Wshift-count-overflow warning

2019-05-31 15:23:25 +08:00

media

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

memory

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

misc

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

net

ipv6: constify rt6_nexthop()

2019-06-26 13:26:08 -07:00

pcmcia

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ras

…

rdma

Merge tag 'spdx-5.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2019-06-08 12:52:42 -07:00

scsi

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 335

2019-06-05 17:37:06 +02:00

soc

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

sound

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

target

scsi: target/iscsi: Handle too large immediate data buffers correctly

2019-04-12 20:20:06 -04:00

trace

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 284

2019-06-05 17:36:37 +02:00

uapi

Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/spdx

2019-06-21 09:58:42 -07:00

video

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

xen

block: pass page to xen_biovec_phys_mergeable

2019-04-01 12:11:13 -06:00