ACK: [PATCH 0/6][B] Lockdown updates

Stefan Bader stefan.bader at canonical.com
Tue Jun 23 07:25:12 UTC 2020


On 19.06.20 14:48, Seth Forshee wrote:
> It appears I forgot to send the bionic updates out yesterday when I sent
> patches for everything else.
> 
> BugLink: https://bugs.launchpad.net/bugs/1884159
> 
> The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
> 
>   UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
> 
> for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
> 
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
> 
> Thanks,
> Seth
> 
> ----------------------------------------------------------------
> Christopher M. Riedl (2):
>   powerpc/xmon: add read-only mode
>   powerpc/xmon: Restrict when kernel is locked down
> 
> Jason A. Donenfeld (1):
>   UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
>     down
> 
> Javier Martinez Canillas (1):
>   efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
> 
> Matthew Garrett (1):
>   efi: Restrict efivar_ssdt_load when the kernel is locked down
> 
> Seth Forshee (1):
>   UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
> 
>  arch/powerpc/Kconfig.debug                |   8 ++
>  arch/powerpc/xmon/xmon.c                  | 148 +++++++++++++++++++---
>  debian.master/config/config.common.ubuntu |   1 +
>  drivers/acpi/acpi_configfs.c              |   4 +
>  drivers/firmware/efi/efi.c                |   5 +
>  drivers/firmware/efi/test/efi_test.c      |   7 +
>  6 files changed, 156 insertions(+), 17 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader at canonical.com>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20200623/7b944518/attachment.sig>


More information about the kernel-team mailing list