This repository was archived by the owner on Sep 24, 2020. It is now read-only.

Roll back to 4.9.24 for stable#53

Merged

bgilbert merged 18 commits intocoreos:v4.9.24-coreosfrom

bgilbert:v4.9.24-coreos

Apr 24, 2017

Commits on Apr 24, 2017

Add secure_modules() call

Matthew Garrett
authored and
bgilbert
committed
PCI: Lock down BAR access when module security is enabled

Matthew Garrett
authored and
bgilbert
committed
x86: Lock down IO port access when module security is enabled

Matthew Garrett
authored and
bgilbert
committed
ACPI: Limit access to custom_method

Matthew Garrett
authored and
bgilbert
committed
asus-wmi: Restrict debugfs interface when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
Restrict /dev/mem and /dev/kmem when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

jwboyer
authored and
bgilbert
committed
kexec: Disable at runtime if the kernel enforces module loading restrictions

Matthew Garrett
authored and
bgilbert
committed
x86: Restrict MSR access when module loading is restricted

Matthew Garrett
authored and
bgilbert
committed
Add option to automatically enforce module signatures when in Secure Boot mode

Matthew Garrett
authored and
bgilbert
committed
efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

Josh Boyer
authored and
bgilbert
committed
efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
bgilbert
committed
hibernate: Disable in a signed modules environment

Josh Boyer
authored and
bgilbert
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
bgilbert
committed
Add arm64 coreos verity hash

glevand
authored and
bgilbert
committed
selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

stephensmalley
authored and
bgilbert
committed
perf/x86/intel/rapl: Make package handling more robust

KAGA-KOKO
authored and
bgilbert
committed
perf/x86/intel/uncore: Make package handling more robust

KAGA-KOKO
authored and
bgilbert
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Roll back to 4.9.24 for stable#53

Roll back to 4.9.24 for stable#53
bgilbert merged 18 commits intocoreos:v4.9.24-coreosfrom
bgilbert:v4.9.24-coreos

Commits on Apr 24, 2017

Add secure_modules() call

PCI: Lock down BAR access when module security is enabled

x86: Lock down IO port access when module security is enabled

ACPI: Limit access to custom_method

asus-wmi: Restrict debugfs interface when module loading is restricted

Restrict /dev/mem and /dev/kmem when module loading is restricted

acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

kexec: Disable at runtime if the kernel enforces module loading restrictions

x86: Restrict MSR access when module loading is restricted

Add option to automatically enforce module signatures when in Secure Boot mode

efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

efi: Add EFI_SECURE_BOOT bit

hibernate: Disable in a signed modules environment

kbuild: derive relative path for KBUILD_SRC from CURDIR

Add arm64 coreos verity hash

selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

perf/x86/intel/rapl: Make package handling more robust

perf/x86/intel/uncore: Make package handling more robust

Roll back to 4.9.24 for stable#53bgilbert merged 18 commits intocoreos:v4.9.24-coreoscoreos/linux:v4.9.24-coreosfrom bgilbert:v4.9.24-coreosCopy head branch name to clipboard

Commits

Commits on Apr 24, 2017

Roll back to 4.9.24 for stable#53
bgilbert merged 18 commits intocoreos:v4.9.24-coreosfrom
bgilbert:v4.9.24-coreos