This repository has been archived by the owner on Sep 24, 2020. It is now read-only.

Rebase CoreOS patches onto Linux v4.9.9#39

Merged

bgilbert merged 16 commits intocoreos:v4.9.9-coreosfrom bgilbert:v4.9.9-coreos

Feb 14, 2017

+159-12

Commits on Feb 13, 2017

Add secure_modules() call

Matthew Garrett
authored and
bgilbert
committed
PCI: Lock down BAR access when module security is enabled

Matthew Garrett
authored and
bgilbert
committed
x86: Lock down IO port access when module security is enabled

Matthew Garrett
authored and
bgilbert
committed
ACPI: Limit access to custom_method

Matthew Garrett
authored and
bgilbert
committed
asus-wmi: Restrict debugfs interface when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
Restrict /dev/mem and /dev/kmem when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

jwboyer
authored and
bgilbert
committed
kexec: Disable at runtime if the kernel enforces module loading restrictions

Matthew Garrett
authored and
bgilbert
committed
x86: Restrict MSR access when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
Add option to automatically enforce module signatures when in Secure Boot mode

Matthew Garrett
authored and
bgilbert
committed
efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

Josh Boyer
authored and
bgilbert
committed
efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
bgilbert
committed
hibernate: Disable in a signed modules environment

Josh Boyer
authored and
bgilbert
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
bgilbert
committed
Add arm64 coreos verity hash

glevand
authored and
bgilbert
committed
selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

stephensmalley
authored and
bgilbert
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Rebase CoreOS patches onto Linux v4.9.9#39

Commits on Feb 13, 2017

Add secure_modules() call

PCI: Lock down BAR access when module security is enabled

x86: Lock down IO port access when module security is enabled

ACPI: Limit access to custom_method

asus-wmi: Restrict debugfs interface when module loading is restricted

Restrict /dev/mem and /dev/kmem when module loading is restricted

acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

kexec: Disable at runtime if the kernel enforces module loading restrictions

x86: Restrict MSR access when module loading is restricted

Add option to automatically enforce module signatures when in Secure Boot mode

efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

efi: Add EFI_SECURE_BOOT bit

hibernate: Disable in a signed modules environment

kbuild: derive relative path for KBUILD_SRC from CURDIR

Add arm64 coreos verity hash

selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces