Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image

From	James Morris <jmorris@namei.org>
Newsgroups	linux.kernel
Subject	Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image
Date	2017-04-07 00:50 +0200
Message-ID	<ttoo1-73j-3@gated-at.bofh.it> (permalink)
References	<ttfb4-cf-3@gated-at.bofh.it> <ttfb5-cf-29@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Thu, 6 Apr 2017, David Howells wrote:

> Provide a single call to allow kernel code to determine whether the system
> should be locked down, thereby disallowing various accesses that might
> allow the running kernel image to be changed including the loading of
> modules that aren't validly signed with a key we recognise, fiddling with
> MSR registers and disallowing hibernation,
> 
> Signed-off-by: David Howells <dhowells@redhat.com>

Acked-by: James Morris <james.l.morris@oracle.com>

-- 
James Morris
<jmorris@namei.org>

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code David Howells <dhowells@redhat.com> - 2017-04-06 15:00 +0200
  Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code David Howells <dhowells@redhat.com> - 2017-04-06 15:00 +0200
  [PATCH 2/5] efi: Add EFI_SECURE_BOOT bit David Howells <dhowells@redhat.com> - 2017-04-06 15:00 +0200
  [PATCH 3/5] Add the ability to lock down access to the running  kernel image David Howells <dhowells@redhat.com> - 2017-04-06 15:00 +0200
    Re: [PATCH 3/5] Add the ability to lock down access to the running  kernel image James Morris <jmorris@namei.org> - 2017-04-07 00:50 +0200

csiph-web