iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/firmware/efi
History
Matthew Garrett 1957a85b00 efi: Restrict efivar_ssdt_load when the kernel is locked down 
efivar_ssdt_load allows the kernel to import arbitrary ACPI code from an
EFI variable, which gives arbitrary code execution in ring 0. Prevent
that when the kernel is locked down.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Acked-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: linux-efi@vger.kernel.org
Signed-off-by: James Morris <jmorris@namei.org>
2019-08-19 21:54:17 -07:00
..
libstub
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 497
2019-06-19 17:09:53 +02:00
test
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
apple-properties.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
arm-init.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
arm-runtime.c
efi: Unify DMI setup code over the arm/arm64, ia64 and x86 architectures
2019-03-29 07:35:00 +01:00
capsule-loader.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
capsule.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
cper-arm.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
cper-x86.c
efi: Decode IA32/X64 Context Info structure
2018-05-14 08:57:48 +02:00
cper.c
ACPI updates for 5.1-rc1
2019-03-06 13:33:11 -08:00
dev-path-parser.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
earlycon.c
efi/x86: Convert x86 EFI earlyprintk into generic earlycon implementation
2019-02-04 08:27:30 +01:00
efi-bgrt.c
efi/bgrt: Drop BGRT status field reserved bits check
2019-06-11 16:13:05 +02:00
efi-pstore.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
efi.c
efi: Restrict efivar_ssdt_load when the kernel is locked down
2019-08-19 21:54:17 -07:00
efibc.c
efibc: Replace variable set function in notifier call
2019-06-22 10:24:57 +02:00
efivars.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
esrt.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
fake_mem.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
Kconfig
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
Makefile
efi/x86: Convert x86 EFI earlyprintk into generic earlycon implementation
2019-02-04 08:27:30 +01:00
memattr.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
memmap.c
efi/arm: Revert deferred unmap of early memmap mapping
2018-11-15 10:04:46 +01:00
reboot.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
runtime-map.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
runtime-wrappers.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
tpm.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00
vars.c
efi: Replace GPL license boilerplate with SPDX headers
2019-02-04 08:27:25 +01:00