mbox series

[0/4,E] Lockdown updates

Message ID 20200618231501.630852-1-seth.forshee@canonical.com
Headers show
Series Lockdown updates | expand

Message

Seth Forshee June 18, 2020, 11:14 p.m. UTC
BugLink: https://bugs.launchpad.net/bugs/1884159

The following changes since commit e0ed87ef9ee974e776ba756b1e6cea9f373165d4:

  UBUNTU: Ubuntu-5.0.0-53.57 (2020-06-08 18:13:10 -0300)

are available in the Git repository at:

  git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/disco lockdown-updates

for you to fetch changes up to 9f1a24f069a85e506e8e0cb35ec0c80ee8d553ad:

  UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y (2020-06-16 16:48:08 -0500)

Thanks,
Seth

----------------------------------------------------------------
Christopher M. Riedl (1):
  powerpc/xmon: Restrict when kernel is locked down

Jason A. Donenfeld (1):
  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
    down

Javier Martinez Canillas (1):
  efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN

Matthew Garrett (1):
  efi: Restrict efivar_ssdt_load when the kernel is locked down

 arch/powerpc/xmon/xmon.c             | 90 +++++++++++++++++++++-------
 drivers/acpi/acpi_configfs.c         |  4 ++
 drivers/firmware/efi/efi.c           |  5 ++
 drivers/firmware/efi/test/efi_test.c |  7 +++
 4 files changed, 85 insertions(+), 21 deletions(-)

Comments

Stefan Bader June 23, 2020, 7:21 a.m. UTC | #1
On 19.06.20 01:14, Seth Forshee wrote:
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit e0ed87ef9ee974e776ba756b1e6cea9f373165d4:
> 
>   UBUNTU: Ubuntu-5.0.0-53.57 (2020-06-08 18:13:10 -0300)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/disco lockdown-updates
> 
> for you to fetch changes up to 9f1a24f069a85e506e8e0cb35ec0c80ee8d553ad:
> 
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y (2020-06-16 16:48:08 -0500)
> 
> Thanks,
> Seth
> 
> ----------------------------------------------------------------
> Christopher M. Riedl (1):
>   powerpc/xmon: Restrict when kernel is locked down
> 
> Jason A. Donenfeld (1):
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
>     down
> 
> Javier Martinez Canillas (1):
>   efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
> 
> Matthew Garrett (1):
>   efi: Restrict efivar_ssdt_load when the kernel is locked down
> 
>  arch/powerpc/xmon/xmon.c             | 90 +++++++++++++++++++++-------
>  drivers/acpi/acpi_configfs.c         |  4 ++
>  drivers/firmware/efi/efi.c           |  5 ++
>  drivers/firmware/efi/test/efi_test.c |  7 +++
>  4 files changed, 85 insertions(+), 21 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Andrea Righi June 23, 2020, 7:27 a.m. UTC | #2
On Thu, Jun 18, 2020 at 06:14:57PM -0500, Seth Forshee wrote:
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit e0ed87ef9ee974e776ba756b1e6cea9f373165d4:
> 
>   UBUNTU: Ubuntu-5.0.0-53.57 (2020-06-08 18:13:10 -0300)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/disco lockdown-updates
> 
> for you to fetch changes up to 9f1a24f069a85e506e8e0cb35ec0c80ee8d553ad:
> 
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y (2020-06-16 16:48:08 -0500)
> 
> Thanks,
> Seth

Acked-by: Andrea Righi <andrea.righi@canonical.com>
Khalid Elmously June 30, 2020, 3:58 a.m. UTC | #3
On 2020-06-18 18:14:57 , Seth Forshee wrote:
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit e0ed87ef9ee974e776ba756b1e6cea9f373165d4:
> 
>   UBUNTU: Ubuntu-5.0.0-53.57 (2020-06-08 18:13:10 -0300)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/disco lockdown-updates
> 
> for you to fetch changes up to 9f1a24f069a85e506e8e0cb35ec0c80ee8d553ad:
> 
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y (2020-06-16 16:48:08 -0500)
> 
> Thanks,
> Seth
> 
> ----------------------------------------------------------------
> Christopher M. Riedl (1):
>   powerpc/xmon: Restrict when kernel is locked down
> 
> Jason A. Donenfeld (1):
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
>     down
> 
> Javier Martinez Canillas (1):
>   efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
> 
> Matthew Garrett (1):
>   efi: Restrict efivar_ssdt_load when the kernel is locked down
> 
>  arch/powerpc/xmon/xmon.c             | 90 +++++++++++++++++++++-------
>  drivers/acpi/acpi_configfs.c         |  4 ++
>  drivers/firmware/efi/efi.c           |  5 ++
>  drivers/firmware/efi/test/efi_test.c |  7 +++
>  4 files changed, 85 insertions(+), 21 deletions(-)
> 
> -- 
> 2.27.0
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team