diff options
| author | Kees Cook <[email protected]> | 2016-04-20 15:46:28 -0700 |
|---|---|---|
| committer | James Morris <[email protected]> | 2016-04-21 10:47:27 +1000 |
| commit | 9b091556a073a9f5f93e2ad23d118f45c4796a84 (patch) | |
| tree | 075fffff80b5caad9738f633c83333dea9e04efd /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | 1284ab5b2dcb927d38e4f3fbc2e307f3d1af9262 (diff) | |
LSM: LoadPin for kernel file loading restrictions
This LSM enforces that kernel-loaded files (modules, firmware, etc)
must all come from the same filesystem, with the expectation that
such a filesystem is backed by a read-only device such as dm-verity
or CDROM. This allows systems that have a verified and/or unchangeable
filesystem to enforce module and firmware loading restrictions without
needing to sign the files individually.
Signed-off-by: Kees Cook <[email protected]>
Acked-by: Serge Hallyn <[email protected]>
Signed-off-by: James Morris <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions