]> www.infradead.org Git - users/jedix/linux-maple.git/commit
Restrict /dev/mem and /dev/kmem when securelevel is set.
authorMatthew Garrett <matthew.garrett@nebula.com>
Mon, 9 Sep 2013 22:49:39 +0000 (15:49 -0700)
committerSantosh Shilimkar <santosh.shilimkar@oracle.com>
Mon, 10 Aug 2015 16:24:05 +0000 (09:24 -0700)
commit3fab26a9585e895ae41ce6462bc389327f9a0e63
tree7cf333de22da0d41e4d226429417ca05def3293d
parentd6ff7b26e9867e2984a3ff2ed73706fa27ca4843
Restrict /dev/mem and /dev/kmem when securelevel is set.

Orabug: 21539498

Allowing users to write to address space provides mechanisms that may permit
modification of the kernel at runtime. Prevent this if securelevel has been
set.

Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
drivers/char/mem.c