Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 15/24] asus-wmi: Restrict debugfs interface when the kernel is locked down | Date | Tue, 18 Apr 2017 16:30:34 +0100 |
| |
Ben Hutchings <ben@decadent.org.uk> wrote:
> So it's generally not going to be OK to turn off debugfs. There will > probably need to be a distinction between believed-safe and unsafe > directories/files.
Any suggestion on how to mark this distinction? I'd prefer not to modify every read/write op associated with a debugfs file. Modify DEFINE_DEBUGFS_ATTRIBUTE() maybe? And provide lockable variants of debugfs_create_u8() and co.?
David
| |