Commits · kernel-5.3.0-1.elrdy · Jaroslav Kysela / kernel-ark · GitLab

Sep 16, 2019
- [redhat] kernel-5.3.0-1.elrdy · 8836b375
  Jeremy Cline authored Sep 16, 2019
  View commits for tag kernel-5.3.0-1.elrdy kernel-5.3.0-1.elrdy
  
  8836b375
- redhat: configs: Set configuration values for secureboot · f42aa92c
  Laura Abbott authored Jun 19, 2019
  f42aa92c
- efi: Lock down the kernel if booted in secure boot mode · 9e1634e1
  Laura Abbott authored Jun 19, 2019
  9e1634e1
- efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode · 499b0ca7
  Laura Abbott authored Jun 19, 2019
  499b0ca7
- Make get_cert_list() use efi_status_to_str() to print error messages. · 939a63a1
  Laura Abbott authored Jun 19, 2019
  939a63a1
- Add efi_status_to_str() and rework efi_status_to_err(). · 720b60bb
  Laura Abbott authored Jun 19, 2019
  720b60bb
- Make get_cert_list() not complain about cert lists that aren't present. · 9a3fa41d
  Laura Abbott authored Jun 19, 2019
  9a3fa41d
- debugfs: avoid EPERM when no open file operation defined · d327addf
  Laura Abbott authored Jun 19, 2019
  d327addf
- Add a SysRq option to lift kernel lockdown · faf3c359
  Laura Abbott authored Jun 19, 2019
  faf3c359
- kexec: Allow kexec_file() with appropriate IMA policy when locked down · d1202045
  Laura Abbott authored Jun 19, 2019
  d1202045
- lockdown: Print current->comm in restriction messages · c97d0e54
  Laura Abbott authored Jun 19, 2019
  c97d0e54
- debugfs: Restrict debugfs when the kernel is locked down · 76d59961
  Jeremy Cline authored Jul 23, 2019
  76d59961
- Lock down perf · 22f869ad
  Laura Abbott authored Jun 19, 2019
  22f869ad
- bpf: Restrict kernel image access functions when the kernel is locked down · dfd93cd4
  Laura Abbott authored Jun 19, 2019
  dfd93cd4
- Lock down kprobes · 9207fbf5
  Laura Abbott authored Jun 19, 2019
  9207fbf5
- Lock down /proc/kcore · ec22abad
  Laura Abbott authored Jun 19, 2019
  ec22abad
- x86/mmiotrace: Lock down the testmmiotrace module · 7c81f944
  Laura Abbott authored Jun 19, 2019
  7c81f944
- Lock down module params that specify hardware parameters (eg. ioport) · 25779a58
  Laura Abbott authored Jun 19, 2019
  25779a58
- Lock down TIOCSSERIAL · 857d1615
  Laura Abbott authored Jun 19, 2019
  857d1615
- Prohibit PCMCIA CIS storage when the kernel is locked down · f29f0689
  Laura Abbott authored Jun 19, 2019
  f29f0689
- acpi: Disable APEI error injection if the kernel is locked down · 2ef6f965
  Laura Abbott authored Jun 19, 2019
  2ef6f965
- acpi: Disable ACPI table override if the kernel is locked down · 957bc3c2
  Laura Abbott authored Jun 19, 2019
  957bc3c2
- acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down · e40db8fb
  Laura Abbott authored Jun 19, 2019
  e40db8fb
- ACPI: Limit access to custom_method when the kernel is locked down · 9a9a64c2
  Laura Abbott authored Jun 19, 2019
  9a9a64c2
- x86/msr: Restrict MSR access when the kernel is locked down · a1862279
  Laura Abbott authored Jun 19, 2019
  a1862279
- x86: Lock down IO port access when the kernel is locked down · acbba099
  Laura Abbott authored Jun 19, 2019
  acbba099
- PCI: Lock down BAR access when the kernel is locked down · e7f1d458
  Laura Abbott authored Jun 19, 2019
  e7f1d458
- uswsusp: Disable when the kernel is locked down · 31d762fc
  Laura Abbott authored Jun 19, 2019
  31d762fc
- hibernate: Disable when the kernel is locked down · 486eda8e
  Laura Abbott authored Jun 19, 2019
  486eda8e
- kexec_file: Restrict at runtime if the kernel is locked down · 32eb93f1
  Laura Abbott authored Jun 19, 2019
  32eb93f1
- kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE · 56850a59
  Laura Abbott authored Jun 19, 2019
  56850a59
- Copy secure_boot flag in boot params across kexec reboot · 9b1f9926
  Laura Abbott authored Jun 19, 2019
  9b1f9926
- kexec_load: Disable at runtime if the kernel is locked down · bd8eb68b
  Laura Abbott authored Jun 19, 2019
  bd8eb68b
- Restrict /dev/{mem, kmem, port} when the kernel is locked down · 86d45551
  Laura Abbott authored Jun 19, 2019
  86d45551
- Enforce module signatures if the kernel is locked down · 4b4111d2
  Laura Abbott authored Jun 19, 2019
  4b4111d2
- Add the ability to lock down access to the running kernel image · 278e4bef
  Laura Abbott authored Jun 19, 2019
  278e4bef
- [iommu] iommu/arm-smmu: workaround DMA mode issues · d52d651e
  Laura Abbott authored May 20, 2019
  d52d651e
- [kernel] rh_taint: correct loaddable module support dependencies · 85250aad
  Philipp Rudo authored Nov 23, 2018
  85250aad
- [kernel] rh_kabi: introduce RH_KABI_EXCLUDE · 8e41922d
  Jakub Racek authored Nov 22, 2018
  8e41922d
- [x86] mark intel knights landing and knights mill unsupported · 555e0d96
  David Arcari authored Aug 06, 2018
  555e0d96