mbox series

[0/6,B] Lockdown updates

Message ID 20200619124833.633575-1-seth.forshee@canonical.com
Headers show
Series Lockdown updates | expand

Message

Seth Forshee June 19, 2020, 12:48 p.m. UTC
It appears I forgot to send the bionic updates out yesterday when I sent
patches for everything else.

BugLink: https://bugs.launchpad.net/bugs/1884159

The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:

  UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)

are available in the Git repository at:

  git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates

for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:

  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)

Thanks,
Seth

----------------------------------------------------------------
Christopher M. Riedl (2):
  powerpc/xmon: add read-only mode
  powerpc/xmon: Restrict when kernel is locked down

Jason A. Donenfeld (1):
  UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
    down

Javier Martinez Canillas (1):
  efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN

Matthew Garrett (1):
  efi: Restrict efivar_ssdt_load when the kernel is locked down

Seth Forshee (1):
  UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y

 arch/powerpc/Kconfig.debug                |   8 ++
 arch/powerpc/xmon/xmon.c                  | 148 +++++++++++++++++++---
 debian.master/config/config.common.ubuntu |   1 +
 drivers/acpi/acpi_configfs.c              |   4 +
 drivers/firmware/efi/efi.c                |   5 +
 drivers/firmware/efi/test/efi_test.c      |   7 +
 6 files changed, 156 insertions(+), 17 deletions(-)

Comments

Stefan Bader June 23, 2020, 7:25 a.m. UTC | #1
On 19.06.20 14:48, Seth Forshee wrote:
> It appears I forgot to send the bionic updates out yesterday when I sent
> patches for everything else.
> 
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
> 
>   UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
> 
> for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
> 
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
> 
> Thanks,
> Seth
> 
> ----------------------------------------------------------------
> Christopher M. Riedl (2):
>   powerpc/xmon: add read-only mode
>   powerpc/xmon: Restrict when kernel is locked down
> 
> Jason A. Donenfeld (1):
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
>     down
> 
> Javier Martinez Canillas (1):
>   efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
> 
> Matthew Garrett (1):
>   efi: Restrict efivar_ssdt_load when the kernel is locked down
> 
> Seth Forshee (1):
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
> 
>  arch/powerpc/Kconfig.debug                |   8 ++
>  arch/powerpc/xmon/xmon.c                  | 148 +++++++++++++++++++---
>  debian.master/config/config.common.ubuntu |   1 +
>  drivers/acpi/acpi_configfs.c              |   4 +
>  drivers/firmware/efi/efi.c                |   5 +
>  drivers/firmware/efi/test/efi_test.c      |   7 +
>  6 files changed, 156 insertions(+), 17 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Andrea Righi June 23, 2020, 9:11 a.m. UTC | #2
On Fri, Jun 19, 2020 at 07:48:27AM -0500, Seth Forshee wrote:
> It appears I forgot to send the bionic updates out yesterday when I sent
> patches for everything else.
> 
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
> 
>   UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
> 
> for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
> 
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
> 
> Thanks,
> Seth

Acked-by: Andrea Righi <andrea.righi@canonical.com>
Kelsey Skunberg July 17, 2020, 7:14 a.m. UTC | #3
Khalid already applied these to bionic/master-next. Thank you! 

-Kelsey 

On 2020-06-19 07:48:27 , Seth Forshee wrote:
> It appears I forgot to send the bionic updates out yesterday when I sent
> patches for everything else.
> 
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
> 
>   UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
> 
> for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
> 
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
> 
> Thanks,
> Seth
> 
> ----------------------------------------------------------------
> Christopher M. Riedl (2):
>   powerpc/xmon: add read-only mode
>   powerpc/xmon: Restrict when kernel is locked down
> 
> Jason A. Donenfeld (1):
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
>     down
> 
> Javier Martinez Canillas (1):
>   efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
> 
> Matthew Garrett (1):
>   efi: Restrict efivar_ssdt_load when the kernel is locked down
> 
> Seth Forshee (1):
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
> 
>  arch/powerpc/Kconfig.debug                |   8 ++
>  arch/powerpc/xmon/xmon.c                  | 148 +++++++++++++++++++---
>  debian.master/config/config.common.ubuntu |   1 +
>  drivers/acpi/acpi_configfs.c              |   4 +
>  drivers/firmware/efi/efi.c                |   5 +
>  drivers/firmware/efi/test/efi_test.c      |   7 +
>  6 files changed, 156 insertions(+), 17 deletions(-)
> 
> -- 
> 2.27.0
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team