Messages in this thread | | | From | Matthew Garrett <> | Date | Thu, 27 Jun 2019 08:30:52 -0700 | Subject | Re: [PATCH V34 19/29] Lock down module params that specify hardware parameters (eg. ioport) |
| |
On Wed, Jun 26, 2019 at 6:49 PM Daniel Axtens <dja@axtens.net> wrote: > > Matthew Garrett <matthewgarrett@google.com> writes: > > + if (kp->flags & KERNEL_PARAM_FL_HWPARAM && > > + security_locked_down(LOCKDOWN_MODULE_PARAMETERS)) > > + return false; > > + return true; > > } > > Should this test occur before tainting the kernel?
Seems reasonable.
| |