]> www.infradead.org Git - users/jedix/linux-maple.git/commit
asus-wmi: Restrict debugfs interface when securelevel is set
authorMatthew Garrett <matthew.garrett@nebula.com>
Mon, 9 Sep 2013 22:49:45 +0000 (15:49 -0700)
committerSantosh Shilimkar <santosh.shilimkar@oracle.com>
Mon, 10 Aug 2015 16:24:06 +0000 (09:24 -0700)
commit16f61bd6608338962a768c4dbacd764843223ddc
treec6c8a7ddfd27a53292181d9ffe9608565198eac6
parent5c700e60c8c54a4f552af3bd79b5c4e431b761f1
asus-wmi: Restrict debugfs interface when securelevel is set

Orabug: 21539498

We have no way of validating what all of the Asus WMI methods do on a
given machine, and there's a risk that some will allow hardware state to
be manipulated in such a way that arbitrary code can be executed in the
kernel. Prevent that if securelevel is set.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
drivers/platform/x86/asus-wmi.c