[PATCH 09/27] uswsusp: Disable when the kernel is locked down
From: James Morris <hidden>
Date: 2017-10-20 23:29:16
Also in:
linux-efi, lkml
On Thu, 19 Oct 2017, David Howells wrote:
From: Matthew Garrett <mjg59@srcf.ucam.org> uswsusp allows a user process to dump and then restore kernel state, which makes it possible to modify the running kernel. Disable this if the kernel is locked down. Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org> Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: James Morris <redacted> -- James Morris [off-list ref] -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html