Re: [PATCH V31 25/25] debugfs: Disable open() when kernel is locked down
From: Matthew Garrett <hidden>
Date: 2019-03-26 19:22:10
Also in:
linux-security-module, lkml
On Tue, Mar 26, 2019 at 12:20 PM Andy Lutomirski [off-list ref] wrote:
Ugh. Some of those files are very useful. Could this perhaps still allow O_RDONLY if we're in INTEGRITY mode?
The previous implementation did, but Greg wanted it to go away entirely.