This repository has been archived by the owner on Sep 24, 2020. It is now read-only.

*: rebase changes from v4.3.3-coreos#6

Merged

crawford merged 21 commits intocoreos:v4.4-coreosfrom crawford:v4.4-coreos

Jan 12, 2016

+349-20

Commits on Jan 12, 2016

Add secure_modules() call

Matthew Garrett
authored and
crawford
committed
PCI: Lock down BAR access when module security is enabled

Matthew Garrett
authored and
crawford
committed
x86: Lock down IO port access when module security is enabled

Matthew Garrett
authored and
crawford
committed
ACPI: Limit access to custom_method

Matthew Garrett
authored and
crawford
committed
asus-wmi: Restrict debugfs interface when module loading is restricted

Matthew Garrett
authored and
crawford
committed
Restrict /dev/mem and /dev/kmem when module loading is restricted

Matthew Garrett
authored and
crawford
committed
acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

jwboyer
authored and
crawford
committed
kexec: Disable at runtime if the kernel enforces module loading restrictions

Matthew Garrett
authored and
crawford
committed
x86: Restrict MSR access when module loading is restricted

Matthew Garrett
authored and
crawford
committed
Add option to automatically enforce module signatures when in Secure Boot mode

Matthew Garrett
authored and
crawford
committed
efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

Josh Boyer
authored and
crawford
committed
efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
crawford
committed
hibernate: Disable in a signed modules environment

Josh Boyer
authored and
crawford
committed
Security: Provide copy-up security hooks for unioned files

dhowells
authored and
crawford
committed
Overlayfs: Use copy-up security hooks

dhowells
authored and
crawford
committed
SELinux: Stub in copy-up handling

dhowells
authored and
crawford
committed
SELinux: Handle opening of a unioned file

dhowells
authored and
crawford
committed
SELinux: Check against union label for file operations

dhowells
authored and
crawford
committed
overlayfs: use a minimal buffer in ovl_copy_xattr

Vito Caputo
authored and
crawford
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
crawford
committed
Don't verify write permissions on lower inodes on overlayfs

Matthew Garrett
authored and
crawford
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

*: rebase changes from v4.3.3-coreos#6

Commits on Jan 12, 2016

Add secure_modules() call

PCI: Lock down BAR access when module security is enabled

x86: Lock down IO port access when module security is enabled

ACPI: Limit access to custom_method

asus-wmi: Restrict debugfs interface when module loading is restricted

Restrict /dev/mem and /dev/kmem when module loading is restricted

acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

kexec: Disable at runtime if the kernel enforces module loading restrictions

x86: Restrict MSR access when module loading is restricted

Add option to automatically enforce module signatures when in Secure Boot mode

efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

efi: Add EFI_SECURE_BOOT bit

hibernate: Disable in a signed modules environment

Security: Provide copy-up security hooks for unioned files

Overlayfs: Use copy-up security hooks

SELinux: Stub in copy-up handling

SELinux: Handle opening of a unioned file

SELinux: Check against union label for file operations

overlayfs: use a minimal buffer in ovl_copy_xattr

kbuild: derive relative path for KBUILD_SRC from CURDIR

Don't verify write permissions on lower inodes on overlayfs