[PATCH v2 31/57][B] Annotate hardware config module parameters in drivers/scsi/
Seth Forshee
seth.forshee at canonical.com
Fri Jun 19 16:15:55 UTC 2020
From: David Howells <dhowells at redhat.com>
BugLink: https://bugs.launchpad.net/bugs/1884159
When the kernel is running in secure boot mode, we lock down the kernel to
prevent userspace from modifying the running kernel image. Whilst this
includes prohibiting access to things like /dev/mem, it must also prevent
access by means of configuring driver modules in such a way as to cause a
device to access or modify the kernel image.
To this end, annotate module_param* statements that refer to hardware
configuration and indicate for future reference what type of parameter they
specify. The parameter parser in the core sees this information and can
skip such parameters with an error message if the kernel is locked down.
The module initialisation then runs as normal, but just sees whatever the
default values for those parameters is.
Note that we do still need to do the module initialisation because some
drivers have viable defaults set in case parameters aren't specified and
some drivers support automatic configuration (e.g. PNP or PCI) in addition
to manually coded parameters.
This patch annotates drivers in drivers/scsi/.
Suggested-by: Alan Cox <gnomes at lxorguk.ukuu.org.uk>
Signed-off-by: David Howells <dhowells at redhat.com>
cc: "Juergen E. Fischer" <fischer at norbit.de>
cc: "James E.J. Bottomley" <jejb at linux.vnet.ibm.com>
cc: "Martin K. Petersen" <martin.petersen at oracle.com>
cc: Dario Ballabio <ballabio_dario at emc.com>
cc: Finn Thain <fthain at telegraphics.com.au>
cc: Michael Schmitz <schmitzmic at gmail.com>
cc: Achim Leubner <achim_leubner at adaptec.com>
cc: linux-scsi at vger.kernel.org
(backported from commit 88f06b76e462119cb694c3ff13d7d343c49d2569)
Signed-off-by: Seth Forshee <seth.forshee at canonical.com>
---
drivers/scsi/aha152x.c | 4 ++--
drivers/scsi/aha1542.c | 2 +-
drivers/scsi/g_NCR5380.c | 17 +++++++++++++++--
drivers/scsi/gdth.c | 2 +-
drivers/scsi/qlogicfas.c | 4 ++--
5 files changed, 21 insertions(+), 8 deletions(-)
diff --git a/drivers/scsi/aha152x.c b/drivers/scsi/aha152x.c
index f44d0487236e..ce5dc73d85bb 100644
--- a/drivers/scsi/aha152x.c
+++ b/drivers/scsi/aha152x.c
@@ -331,11 +331,11 @@ MODULE_LICENSE("GPL");
#if !defined(PCMCIA)
#if defined(MODULE)
static int io[] = {0, 0};
-module_param_array(io, int, NULL, 0);
+module_param_hw_array(io, int, ioport, NULL, 0);
MODULE_PARM_DESC(io,"base io address of controller");
static int irq[] = {0, 0};
-module_param_array(irq, int, NULL, 0);
+module_param_hw_array(irq, int, irq, NULL, 0);
MODULE_PARM_DESC(irq,"interrupt for controller");
static int scsiid[] = {7, 7};
diff --git a/drivers/scsi/aha1542.c b/drivers/scsi/aha1542.c
index 5b8b2937a3fe..04e40ea98dad 100644
--- a/drivers/scsi/aha1542.c
+++ b/drivers/scsi/aha1542.c
@@ -31,7 +31,7 @@ module_param(isapnp, bool, 0);
MODULE_PARM_DESC(isapnp, "enable PnP support (default=1)");
static int io[MAXBOARDS] = { 0x330, 0x334, 0, 0 };
-module_param_array(io, int, NULL, 0);
+module_param_hw_array(io, int, ioport, NULL, 0);
MODULE_PARM_DESC(io, "base IO address of controller (0x130,0x134,0x230,0x234,0x330,0x334, default=0x330,0x334)");
/* time AHA spends on the AT-bus during data transfer */
diff --git a/drivers/scsi/g_NCR5380.c b/drivers/scsi/g_NCR5380.c
index 87e081f8a386..70f83281bcf9 100644
--- a/drivers/scsi/g_NCR5380.c
+++ b/drivers/scsi/g_NCR5380.c
@@ -75,6 +75,7 @@
#include <scsi/scsi_host.h>
#include "g_NCR5380.h"
#include "NCR5380.h"
+#include <linux/module.h>
#include <linux/stat.h>
#include <linux/init.h>
#include <linux/ioport.h>
@@ -174,6 +175,9 @@ static int __init do_NCR5380_setup(char *str)
{
int ints[10];
+ if (secure_modules())
+ return -EPERM;
+
get_options(str, ARRAY_SIZE(ints), ints);
internal_setup(BOARD_NCR5380, str, ints);
return 1;
@@ -192,6 +196,9 @@ static int __init do_NCR53C400_setup(char *str)
{
int ints[10];
+ if (secure_modules())
+ return -EPERM;
+
get_options(str, ARRAY_SIZE(ints), ints);
internal_setup(BOARD_NCR53C400, str, ints);
return 1;
@@ -210,6 +217,9 @@ static int __init do_NCR53C400A_setup(char *str)
{
int ints[10];
+ if (secure_modules())
+ return -EPERM;
+
get_options(str, ARRAY_SIZE(ints), ints);
internal_setup(BOARD_NCR53C400A, str, ints);
return 1;
@@ -228,6 +238,9 @@ static int __init do_DTC3181E_setup(char *str)
{
int ints[10];
+ if (secure_modules())
+ return -EPERM;
+
get_options(str, ARRAY_SIZE(ints), ints);
internal_setup(BOARD_DTC3181E, str, ints);
return 1;
@@ -717,9 +730,9 @@ static struct scsi_host_template driver_template = {
#include <linux/module.h>
#include "scsi_module.c"
-module_param(ncr_irq, int, 0);
+module_param_hw(ncr_irq, int, irq, 0);
module_param(ncr_dma, int, 0);
-module_param(ncr_addr, int, 0);
+module_param_hw(ncr_addr, int, ioport, 0);
module_param(ncr_5380, int, 0);
module_param(ncr_53c400, int, 0);
module_param(ncr_53c400a, int, 0);
diff --git a/drivers/scsi/gdth.c b/drivers/scsi/gdth.c
index 71e138044379..efc2083a211f 100644
--- a/drivers/scsi/gdth.c
+++ b/drivers/scsi/gdth.c
@@ -353,7 +353,7 @@ static int probe_eisa_isa = 0;
static int force_dma32 = 0;
/* parameters for modprobe/insmod */
-module_param_array(irq, int, NULL, 0);
+module_param_hw_array(irq, int, irq, NULL, 0);
module_param(disable, int, 0);
module_param(reserve_mode, int, 0);
module_param_array(reserve_list, int, NULL, 0);
diff --git a/drivers/scsi/qlogicfas.c b/drivers/scsi/qlogicfas.c
index 61cac87fb86f..840823b99e51 100644
--- a/drivers/scsi/qlogicfas.c
+++ b/drivers/scsi/qlogicfas.c
@@ -137,8 +137,8 @@ err:
static struct qlogicfas408_priv *cards;
static int iobase[MAX_QLOGICFAS];
static int irq[MAX_QLOGICFAS] = { [0 ... MAX_QLOGICFAS-1] = -1 };
-module_param_array(iobase, int, NULL, 0);
-module_param_array(irq, int, NULL, 0);
+module_param_hw_array(iobase, int, ioport, NULL, 0);
+module_param_hw_array(irq, int, irq, NULL, 0);
MODULE_PARM_DESC(iobase, "I/O address");
MODULE_PARM_DESC(irq, "IRQ");
--
2.27.0
More information about the kernel-team
mailing list