[PATCH v2 03/57][X] Revert "Restrict /dev/mem and /dev/kmem when module loading is restricted"

Seth Forshee seth.forshee at canonical.com
Fri Jun 19 16:49:16 UTC 2020


BugLink: https://bugs.launchpad.net/bugs/1884159

This reverts commit 517d6c3a5c1454115dd705e084a88818df3ad7e2 to
backport an updated version.

Signed-off-by: Seth Forshee <seth.forshee at canonical.com>
---
 drivers/char/mem.c | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/drivers/char/mem.c b/drivers/char/mem.c
index a59fe7264c39..76997a645da8 100644
--- a/drivers/char/mem.c
+++ b/drivers/char/mem.c
@@ -188,9 +188,6 @@ static ssize_t write_mem(struct file *file, const char __user *buf,
 	if (p != *ppos)
 		return -EFBIG;
 
-	if (secure_modules())
-		return -EPERM;
-
 	if (!valid_phys_addr_range(p, count))
 		return -EFAULT;
 
@@ -558,9 +555,6 @@ static ssize_t write_kmem(struct file *file, const char __user *buf,
 	char *kbuf; /* k-addr because vwrite() takes vmlist_lock rwlock */
 	int err = 0;
 
-	if (secure_modules())
-		return -EPERM;
-
 	if (p < (unsigned long) high_memory) {
 		unsigned long to_write = min_t(unsigned long, count,
 					       (unsigned long)high_memory - p);
-- 
2.27.0




More information about the kernel-team mailing list