search for: kernel_locked_down

Displaying 1 result from an estimated 1 matches for "kernel_locked_down".

2017 Apr 05
3
[PATCH 02/38] Annotate hardware config module parameters in arch/x86/mm/
When the kernel is running in secure boot mode, we lock down the kernel to prevent userspace from modifying the running kernel image. Whilst this includes prohibiting access to things like /dev/mem, it must also prevent access by means of configuring driver modules in such a way as to cause a device to access or modify the kernel image. To this end, annotate module_param* statements that refer