This repository was archived by the owner on Sep 24, 2020. It is now read-only.

Rebase onto 4.10.1#47

Merged

dm0- merged 16 commits intocoreos:v4.10.1-coreosfrom

dm0-:v4.10.1-coreos

Feb 27, 2017

Commits on Feb 27, 2017

Add secure_modules() call

Matthew Garrett
authored and
dm0-
committed
PCI: Lock down BAR access when module security is enabled

Matthew Garrett
authored and
dm0-
committed
x86: Lock down IO port access when module security is enabled

Matthew Garrett
authored and
dm0-
committed
ACPI: Limit access to custom_method

Matthew Garrett
authored and
dm0-
committed
asus-wmi: Restrict debugfs interface when module loading is restricted

Matthew Garrett
authored and
dm0-
committed
Restrict /dev/mem and /dev/kmem when module loading is restricted

Matthew Garrett
authored and
dm0-
committed
acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

jwboyer
authored and
dm0-
committed
kexec: Disable at runtime if the kernel enforces module loading restrictions

Matthew Garrett
authored and
dm0-
committed
x86: Restrict MSR access when module loading is restricted

Matthew Garrett
authored and
dm0-
committed
Add option to automatically enforce module signatures when in Secure Boot mode

Matthew Garrett
authored and
dm0-
committed
efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

Josh Boyer
authored and
dm0-
committed
efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
dm0-
committed
hibernate: Disable in a signed modules environment

Josh Boyer
authored and
dm0-
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
dm0-
committed
Add arm64 coreos verity hash

glevand
authored and
dm0-
committed
selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

stephensmalley
authored and
dm0-
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Rebase onto 4.10.1#47

Rebase onto 4.10.1#47
dm0- merged 16 commits intocoreos:v4.10.1-coreosfrom
dm0-:v4.10.1-coreos

Commits on Feb 27, 2017

Add secure_modules() call

PCI: Lock down BAR access when module security is enabled

x86: Lock down IO port access when module security is enabled

ACPI: Limit access to custom_method

asus-wmi: Restrict debugfs interface when module loading is restricted

Restrict /dev/mem and /dev/kmem when module loading is restricted

acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

kexec: Disable at runtime if the kernel enforces module loading restrictions

x86: Restrict MSR access when module loading is restricted

Add option to automatically enforce module signatures when in Secure Boot mode

efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

efi: Add EFI_SECURE_BOOT bit

hibernate: Disable in a signed modules environment

kbuild: derive relative path for KBUILD_SRC from CURDIR

Add arm64 coreos verity hash

selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

Rebase onto 4.10.1#47dm0- merged 16 commits intocoreos:v4.10.1-coreoscoreos/linux:v4.10.1-coreosfrom dm0-:v4.10.1-coreosCopy head branch name to clipboard

Commits

Commits on Feb 27, 2017

Rebase onto 4.10.1#47
dm0- merged 16 commits intocoreos:v4.10.1-coreosfrom
dm0-:v4.10.1-coreos