This repository has been archived by the owner on Sep 24, 2020. It is now read-only.

Rebase 4.13-rc6 patches onto 4.13-rc7#83

Merged

bgilbert merged 24 commits intocoreos:v4.13-rc7-coreosfrom bgilbert:v4.13-rc7-coreos

Aug 28, 2017

+208-10

Commits on Aug 28, 2017

efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
bgilbert
committed
Add the ability to lock down access to the running kernel image

dhowells
authored and
bgilbert
committed
efi: Lock down the kernel if booted in secure boot mode

dhowells
authored and
bgilbert
committed
Enforce module signatures if the kernel is locked down

dhowells
authored and
bgilbert
committed
Restrict /dev/mem and /dev/kmem when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
kexec: Disable at runtime if the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
Copy secure_boot flag in boot params across kexec reboot

daveyoung
authored and
bgilbert
committed
kexec_file: Disable at runtime if securelevel has been set

Lee, Chun-Yi
authored and
bgilbert
committed
hibernate: Disable when the kernel is locked down

Josh Boyer
authored and
bgilbert
committed
uswsusp: Disable when the kernel is locked down

mjg59
authored and
bgilbert
committed
PCI: Lock down BAR access when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
x86: Lock down IO port access when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
x86: Restrict MSR access when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
asus-wmi: Restrict debugfs interface when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
ACPI: Limit access to custom_method when the kernel is locked down

Matthew Garrett
authored and
bgilbert
committed
acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down

jwboyer
authored and
bgilbert
committed
acpi: Disable ACPI table override if the kernel is locked down

Linn Crosetto
authored and
bgilbert
committed
acpi: Disable APEI error injection if the kernel is locked down

Linn Crosetto
authored and
bgilbert
committed
bpf: Restrict kernel image access functions when the kernel is locked down

joeyli
authored and
bgilbert
committed
scsi: Lock down the eata driver

dhowells
authored and
bgilbert
committed
Prohibit PCMCIA CIS storage when the kernel is locked down

dhowells
authored and
bgilbert
committed
Lock down TIOCSSERIAL

dhowells
authored and
bgilbert
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
bgilbert
committed
Add arm64 coreos verity hash

glevand
authored and
bgilbert
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Rebase 4.13-rc6 patches onto 4.13-rc7#83

Commits on Aug 28, 2017

efi: Add EFI_SECURE_BOOT bit

Add the ability to lock down access to the running kernel image

efi: Lock down the kernel if booted in secure boot mode

Enforce module signatures if the kernel is locked down

Restrict /dev/mem and /dev/kmem when the kernel is locked down

kexec: Disable at runtime if the kernel is locked down

Copy secure_boot flag in boot params across kexec reboot

kexec_file: Disable at runtime if securelevel has been set

hibernate: Disable when the kernel is locked down

uswsusp: Disable when the kernel is locked down

PCI: Lock down BAR access when the kernel is locked down

x86: Lock down IO port access when the kernel is locked down

x86: Restrict MSR access when the kernel is locked down

asus-wmi: Restrict debugfs interface when the kernel is locked down

ACPI: Limit access to custom_method when the kernel is locked down

acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down

acpi: Disable ACPI table override if the kernel is locked down

acpi: Disable APEI error injection if the kernel is locked down

bpf: Restrict kernel image access functions when the kernel is locked down

scsi: Lock down the eata driver

Prohibit PCMCIA CIS storage when the kernel is locked down

Lock down TIOCSSERIAL

kbuild: derive relative path for KBUILD_SRC from CURDIR

Add arm64 coreos verity hash