]> git.baikalelectronics.ru Git - kernel.git/commit
tracefs: Restrict tracefs when the kernel is locked down
authorMatthew Garrett <matthewgarrett@google.com>
Tue, 20 Aug 2019 00:18:03 +0000 (17:18 -0700)
committerJames Morris <jmorris@namei.org>
Tue, 20 Aug 2019 04:54:17 +0000 (21:54 -0700)
commit73f520d3a7c8e30c87f39ddfa53ac9942dfd671e
tree86b2e1acc2014eea41ceb006e17459b0878bd764
parentec1ebeb0fc6058f2acbcf76a745aeb30656e6e41
tracefs: Restrict tracefs when the kernel is locked down

Tracefs may release more information about the kernel than desirable, so
restrict it when the kernel is locked down in confidentiality mode by
preventing open().

(Fixed by Ben Hutchings to avoid a null dereference in
default_file_open())

Signed-off-by: Matthew Garrett <mjg59@google.com>
Reviewed-by: Steven Rostedt (VMware) <rostedt@goodmis.org>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: James Morris <jmorris@namei.org>
fs/tracefs/inode.c
include/linux/security.h
security/lockdown/lockdown.c