]> git.baikalelectronics.ru Git - kernel.git/commit
firmware_class: perform new LSM checks
authorKees Cook <keescook@chromium.org>
Tue, 25 Feb 2014 21:06:00 +0000 (13:06 -0800)
committerKees Cook <keescook@chromium.org>
Fri, 25 Jul 2014 18:47:45 +0000 (11:47 -0700)
commit41c1b1656d86688010518311b57c551031d62272
tree144e17a8279a61a3c93ad467f1c37c6281db7e35
parent17efce88e455d9bff904680df6ca781c2dca5b86
firmware_class: perform new LSM checks

This attaches LSM hooks to the existing firmware loading interfaces:
filesystem-found firmware and demand-loaded blobs. On errors, loads
are aborted and the failure code is returned to userspace.

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Takashi Iwai <tiwai@suse.de>
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/base/firmware_class.c