diff options
| author | Matthew Garrett <[email protected]> | 2019-08-19 17:17:42 -0700 |
|---|---|---|
| committer | James Morris <[email protected]> | 2019-08-19 21:54:15 -0700 |
| commit | 7d31f4602f8d366072471ca138e4ea7b8edf9be0 (patch) | |
| tree | d6c84bb75d5972c3c2ba086f6e7179d82f36393d /drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | |
| parent | 9b9d8dda1ed72e9bd560ab0ca93d322a9440510e (diff) | |
kexec_load: Disable at runtime if the kernel is locked down
The kexec_load() syscall permits the loading and execution of arbitrary
code in ring 0, which is something that lock-down is meant to prevent. It
makes sense to disable kexec_load() in this situation.
This does not affect kexec_file_load() syscall which can check for a
signature on the image to be booted.
Signed-off-by: David Howells <[email protected]>
Signed-off-by: Matthew Garrett <[email protected]>
Acked-by: Dave Young <[email protected]>
Reviewed-by: Kees Cook <[email protected]>
cc: [email protected]
Signed-off-by: James Morris <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c')
0 files changed, 0 insertions, 0 deletions