| Message ID | 20190220154823.23952-1-dann.frazier@canonical.com |
|---|---|
| Headers | show
Return-Path: <kernel-team-bounces@lists.ubuntu.com> X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=<UNKNOWN>) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=canonical.com Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 444MTb2DYMz9s71; Thu, 21 Feb 2019 02:48:51 +1100 (AEDT) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from <kernel-team-bounces@lists.ubuntu.com>) id 1gwU73-0005OT-9t; Wed, 20 Feb 2019 15:48:45 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.86_2) (envelope-from <dann.frazier@canonical.com>) id 1gwU71-0005O7-Jl for kernel-team@lists.ubuntu.com; Wed, 20 Feb 2019 15:48:43 +0000 Received: from mail-wr1-f70.google.com ([209.85.221.70]) by youngberry.canonical.com with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from <dann.frazier@canonical.com>) id 1gwU71-000648-CW for kernel-team@lists.ubuntu.com; Wed, 20 Feb 2019 15:48:43 +0000 Received: by mail-wr1-f70.google.com with SMTP id v8so10585542wrt.18 for <kernel-team@lists.ubuntu.com>; Wed, 20 Feb 2019 07:48:43 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=m3DHzK8fTxRK+SABd3SnIwpyCr400076QHWdLgT2tm0=; b=PrkTqGrBhmHLgzMIlJ8RQEUBjWgPJTKZyPbbwhYv3KIO5S1Sgq0CUj9gDiIRq2OVB2 LaCshvFJGKhBTkfiyGSCiYj+Ic/DDbcfPq3J/3RAMQ2s9/MrQTAyZwnjPeBiI3uSzMb3 SkbBksZh7fy9duJRLKYPUjOgNYPXCTBukDfkxdb74uqsHyWRIiV3B50dM/sVCk+DMMm8 sGBb0gTQ2PMXB9cQhgDrNpTB060Wza+dlydvdM5j7mG3YSdzMYktcrLUR4rarPbVns0G ItGGgYCSGWb3K5oizHlEiRq9388S9zJRfQt4Itscf7ub80ur9QENbZzN3BNVWh3ZnxWe Sb+w== X-Gm-Message-State: AHQUAuapnyau49OH02FEXX3jsBNrDnRNeAuCqiUmMs1xYx5NthwP8kG8 n1DqfTQWaS5DYAmzJagHplM6+kv194azuLEFBiBcxBtKUbE6KYD78tH4tc96Vu5ra+4S+KEccZo XZxUVtjwCwVELx5zhCPbsKRvsUCD4WRPq+OnFnJKLVg== X-Received: by 2002:a1c:a4c4:: with SMTP id n187mr7199911wme.15.1550677722704; Wed, 20 Feb 2019 07:48:42 -0800 (PST) X-Google-Smtp-Source: AHgI3IZZsFqFwlyQIHrrRspXuDy71dlUjwaZeBoeg4nS3bGUihAYgj6VtvhuCW5suhCJ+IJqV283YQ== X-Received: by 2002:a1c:a4c4:: with SMTP id n187mr7199888wme.15.1550677722169; Wed, 20 Feb 2019 07:48:42 -0800 (PST) Received: from xps13.canonical.com ([2001:67c:1560:8007::aac:c100]) by smtp.gmail.com with ESMTPSA id b18sm13917042wro.80.2019.02.20.07.48.40 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 20 Feb 2019 07:48:41 -0800 (PST) From: dann frazier <dann.frazier@canonical.com> To: kernel-team@lists.ubuntu.com Subject: [PATCH 0/1][Unstable][Disco] lockdown for arm64 Date: Wed, 20 Feb 2019 16:48:22 +0100 Message-Id: <20190220154823.23952-1-dann.frazier@canonical.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions <kernel-team.lists.ubuntu.com> List-Unsubscribe: <https://lists.ubuntu.com/mailman/options/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe> List-Archive: <https://lists.ubuntu.com/archives/kernel-team> List-Post: <mailto:kernel-team@lists.ubuntu.com> List-Help: <mailto:kernel-team-request@lists.ubuntu.com?subject=help> List-Subscribe: <https://lists.ubuntu.com/mailman/listinfo/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" <kernel-team-bounces@lists.ubuntu.com> |
| Series |
lockdown for arm64
|
expand
|
On Wed, Feb 20, 2019 at 04:48:22PM +0100, dann frazier wrote: > This patch, lifted from Debian (after some fix-up), enforces lockdown on > arm64 when booted in Secure Boot mode. Tested in QEMU. Applied to disco and unstable, thanks!
This patch, lifted from Debian (after some fix-up), enforces lockdown on arm64 when booted in Secure Boot mode. Tested in QEMU. Linn Crosetto (1): UBUNTU: SAUCE: arm64: add kernel config option to lock down when in Secure Boot mode drivers/firmware/efi/arm-init.c | 4 ++++ drivers/firmware/efi/efi.c | 3 ++- drivers/firmware/efi/libstub/fdt.c | 6 ++++++ include/linux/efi.h | 1 + 4 files changed, 13 insertions(+), 1 deletion(-)