Commits · kernel-5.2.0-1.elrdy · Ben Crocker / kernel-ark · GitLab

Jul 08, 2019
- [redhat] kernel-5.2.0-1.elrdy · 484fb52d
  Laura Abbott authored Jul 08, 2019
  View commits for tag kernel-5.2.0-1.elrdy kernel-5.2.0-1.elrdy
  484fb52d
- redhat: configs: Set configuration values for secureboot · 224be443
  Laura Abbott authored Jun 19, 2019
  224be443
- efi: Lock down the kernel if booted in secure boot mode · 40f607dd
  Laura Abbott authored Jun 19, 2019
  40f607dd
- efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode · 841ac436
  Laura Abbott authored Jun 19, 2019
  841ac436
- Make get_cert_list() use efi_status_to_str() to print error messages. · eafeb5ef
  Laura Abbott authored Jun 19, 2019
  eafeb5ef
- Add efi_status_to_str() and rework efi_status_to_err(). · 88b4f002
  Laura Abbott authored Jun 19, 2019
  88b4f002
- Make get_cert_list() not complain about cert lists that aren't present. · 13a165f4
  Laura Abbott authored Jun 19, 2019
  13a165f4
- debugfs: avoid EPERM when no open file operation defined · 1a7deb04
  Laura Abbott authored Jun 19, 2019
  1a7deb04
- Add a SysRq option to lift kernel lockdown · 5e6118a5
  Laura Abbott authored Jun 19, 2019
  5e6118a5
- kexec: Allow kexec_file() with appropriate IMA policy when locked down · bf88673e
  Laura Abbott authored Jun 19, 2019
  bf88673e
- lockdown: Print current->comm in restriction messages · b5ef1b04
  Laura Abbott authored Jun 19, 2019
  b5ef1b04
- debugfs: Restrict debugfs when the kernel is locked down · 241e4508
  Laura Abbott authored Jun 19, 2019
  241e4508
- Lock down perf · 12483579
  Laura Abbott authored Jun 19, 2019
  12483579
- bpf: Restrict kernel image access functions when the kernel is locked down · d0375ccd
  Laura Abbott authored Jun 19, 2019
  d0375ccd
- Lock down kprobes · 5c49394c
  Laura Abbott authored Jun 19, 2019
  5c49394c
- Lock down /proc/kcore · b2a03c21
  Laura Abbott authored Jun 19, 2019
  b2a03c21
- x86/mmiotrace: Lock down the testmmiotrace module · 64996a1d
  Laura Abbott authored Jun 19, 2019
  64996a1d
- Lock down module params that specify hardware parameters (eg. ioport) · 558fc801
  Laura Abbott authored Jun 19, 2019
  558fc801
- Lock down TIOCSSERIAL · a089cfdf
  Laura Abbott authored Jun 19, 2019
  a089cfdf
- Prohibit PCMCIA CIS storage when the kernel is locked down · 2ee768fc
  Laura Abbott authored Jun 19, 2019
  2ee768fc
- acpi: Disable APEI error injection if the kernel is locked down · af076c33
  Laura Abbott authored Jun 19, 2019
  af076c33
- acpi: Disable ACPI table override if the kernel is locked down · 265f8b85
  Laura Abbott authored Jun 19, 2019
  265f8b85
- acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down · 3c81fd0f
  Laura Abbott authored Jun 19, 2019
  3c81fd0f
- ACPI: Limit access to custom_method when the kernel is locked down · 742d1ccb
  Laura Abbott authored Jun 19, 2019
  742d1ccb
- x86/msr: Restrict MSR access when the kernel is locked down · 2c770c0e
  Laura Abbott authored Jun 19, 2019
  2c770c0e
- x86: Lock down IO port access when the kernel is locked down · 763e0c98
  Laura Abbott authored Jun 19, 2019
  763e0c98
- PCI: Lock down BAR access when the kernel is locked down · d2347f50
  Laura Abbott authored Jun 19, 2019
  d2347f50
- uswsusp: Disable when the kernel is locked down · 5c4a4bc4
  Laura Abbott authored Jun 19, 2019
  5c4a4bc4
- hibernate: Disable when the kernel is locked down · 12562fa8
  Laura Abbott authored Jun 19, 2019
  12562fa8
- kexec_file: Restrict at runtime if the kernel is locked down · 6ee128f7
  Laura Abbott authored Jun 19, 2019
  6ee128f7
- kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE · 907123be
  Laura Abbott authored Jun 19, 2019
  907123be
- Copy secure_boot flag in boot params across kexec reboot · 07b9fc58
  Laura Abbott authored Jun 19, 2019
  07b9fc58
- kexec_load: Disable at runtime if the kernel is locked down · 29462b1d
  Laura Abbott authored Jun 19, 2019
  29462b1d
- Restrict /dev/{mem, kmem, port} when the kernel is locked down · 31aa6eed
  Laura Abbott authored Jun 19, 2019
  31aa6eed
- Enforce module signatures if the kernel is locked down · bd756fd0
  Laura Abbott authored Jun 19, 2019
  bd756fd0
- Add the ability to lock down access to the running kernel image · 88dfbec1
  Laura Abbott authored Jun 19, 2019
  88dfbec1
- [iommu] iommu/arm-smmu: workaround DMA mode issues · e4d71ae6
  Laura Abbott authored May 20, 2019
  e4d71ae6
- [kernel] rh_taint: correct loaddable module support dependencies · d2cd9d1c
  Philipp Rudo authored Nov 23, 2018 and Laura Abbott committed Jul 08, 2019
  d2cd9d1c
- [kernel] rh_kabi: introduce RH_KABI_EXCLUDE · 215521e6
  Jakub Racek authored Nov 22, 2018 and Laura Abbott committed Jul 08, 2019
  215521e6
- [x86] mark intel knights landing and knights mill unsupported · 6ad33bdd
  David Arcari authored Aug 06, 2018 and Laura Abbott committed Jul 08, 2019
  6ad33bdd