[PATCH 0/4][E] Lockdown updates

Seth Forshee seth.forshee at canonical.com
Thu Jun 18 23:14:57 UTC 2020


BugLink: https://bugs.launchpad.net/bugs/1884159

The following changes since commit e0ed87ef9ee974e776ba756b1e6cea9f373165d4:

  UBUNTU: Ubuntu-5.0.0-53.57 (2020-06-08 18:13:10 -0300)

are available in the Git repository at:

  git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/disco lockdown-updates

for you to fetch changes up to 9f1a24f069a85e506e8e0cb35ec0c80ee8d553ad:

  UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y (2020-06-16 16:48:08 -0500)

Thanks,
Seth

----------------------------------------------------------------
Christopher M. Riedl (1):
  powerpc/xmon: Restrict when kernel is locked down

Jason A. Donenfeld (1):
  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
    down

Javier Martinez Canillas (1):
  efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN

Matthew Garrett (1):
  efi: Restrict efivar_ssdt_load when the kernel is locked down

 arch/powerpc/xmon/xmon.c             | 90 +++++++++++++++++++++-------
 drivers/acpi/acpi_configfs.c         |  4 ++
 drivers/firmware/efi/efi.c           |  5 ++
 drivers/firmware/efi/test/efi_test.c |  7 +++
 4 files changed, 85 insertions(+), 21 deletions(-)

-- 
2.27.0




More information about the kernel-team mailing list