lkml.org 
[lkml]   [2012]   [Sep]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH V2 09/10] acpi: Ignore acpi_rsdp kernel parameter in a secure boot environment
    Date
    From: Josh Boyer <jwboyer@redhat.com>

    This option allows userspace to pass the RSDP address to the kernel. This
    could potentially be used to circumvent the secure boot trust model.
    We ignore the setting if we don't have the CAP_COMPROMISE_KERNEL capability.

    Signed-off-by: Josh Boyer <jwboyer@redhat.com>
    ---
    drivers/acpi/osl.c | 2 +-
    1 file changed, 1 insertion(+), 1 deletion(-)

    diff --git a/drivers/acpi/osl.c b/drivers/acpi/osl.c
    index 9eaf708..f94341b 100644
    --- a/drivers/acpi/osl.c
    +++ b/drivers/acpi/osl.c
    @@ -246,7 +246,7 @@ early_param("acpi_rsdp", setup_acpi_rsdp);
    acpi_physical_address __init acpi_os_get_root_pointer(void)
    {
    #ifdef CONFIG_KEXEC
    - if (acpi_rsdp)
    + if (acpi_rsdp && capable(CAP_COMPROMISE_KERNEL))
    return acpi_rsdp;
    #endif

    --
    1.7.11.4


    \
     
     \ /
      Last update: 2012-09-20 17:21    [W:5.801 / U:0.216 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site