[PATCH 0/6][B] Lockdown updates

Seth Forshee seth.forshee at canonical.com
Fri Jun 19 12:48:27 UTC 2020


It appears I forgot to send the bionic updates out yesterday when I sent
patches for everything else.

BugLink: https://bugs.launchpad.net/bugs/1884159

The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:

  UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)

are available in the Git repository at:

  git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates

for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:

  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)

Thanks,
Seth

----------------------------------------------------------------
Christopher M. Riedl (2):
  powerpc/xmon: add read-only mode
  powerpc/xmon: Restrict when kernel is locked down

Jason A. Donenfeld (1):
  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
    down

Javier Martinez Canillas (1):
  efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN

Matthew Garrett (1):
  efi: Restrict efivar_ssdt_load when the kernel is locked down

Seth Forshee (1):
  UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y

 arch/powerpc/Kconfig.debug                |   8 ++
 arch/powerpc/xmon/xmon.c                  | 148 +++++++++++++++++++---
 debian.master/config/config.common.ubuntu |   1 +
 drivers/acpi/acpi_configfs.c              |   4 +
 drivers/firmware/efi/efi.c                |   5 +
 drivers/firmware/efi/test/efi_test.c      |   7 +
 6 files changed, 156 insertions(+), 17 deletions(-)

-- 
2.27.0




More information about the kernel-team mailing list