Re: [PATCH V34 19/29] Lock down module params that specify hardware parameters (eg. ioport)

On Wed, Jun 26, 2019 at 6:49 PM Daniel Axtens [off-list ref] wrote:

Matthew Garrett [off-list ref] writes:

quoted

+     if (kp->flags & KERNEL_PARAM_FL_HWPARAM &&
+         security_locked_down(LOCKDOWN_MODULE_PARAMETERS))
+             return false;
+     return true;
 }

Should this test occur before tainting the kernel?

Seems reasonable.