[PATCH 0/6][B] Lockdown updates
Seth Forshee
seth.forshee at canonical.com
Fri Jun 19 12:48:27 UTC 2020
It appears I forgot to send the bionic updates out yesterday when I sent
patches for everything else.
BugLink: https://bugs.launchpad.net/bugs/1884159
The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
are available in the Git repository at:
git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
Thanks,
Seth
----------------------------------------------------------------
Christopher M. Riedl (2):
powerpc/xmon: add read-only mode
powerpc/xmon: Restrict when kernel is locked down
Jason A. Donenfeld (1):
UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
down
Javier Martinez Canillas (1):
efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
Matthew Garrett (1):
efi: Restrict efivar_ssdt_load when the kernel is locked down
Seth Forshee (1):
UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
arch/powerpc/Kconfig.debug | 8 ++
arch/powerpc/xmon/xmon.c | 148 +++++++++++++++++++---
debian.master/config/config.common.ubuntu | 1 +
drivers/acpi/acpi_configfs.c | 4 +
drivers/firmware/efi/efi.c | 5 +
drivers/firmware/efi/test/efi_test.c | 7 +
6 files changed, 156 insertions(+), 17 deletions(-)
--
2.27.0
More information about the kernel-team
mailing list