ACK: [PATCH 0/6][B] Lockdown updates
Stefan Bader
stefan.bader at canonical.com
Tue Jun 23 07:25:12 UTC 2020
On 19.06.20 14:48, Seth Forshee wrote:
> It appears I forgot to send the bionic updates out yesterday when I sent
> patches for everything else.
>
> BugLink: https://bugs.launchpad.net/bugs/1884159
>
> The following changes since commit 1b1c170690b148066132560cda285642b39ef40e:
>
> UBUNTU: Ubuntu-4.15.0-103.104 (2020-05-29 14:20:17 +0200)
>
> are available in the Git repository at:
>
> git://git.launchpad.net/~sforshee/ubuntu/+source/linux/+git/bionic lockdown-updates
>
> for you to fetch changes up to 4d2779ff152b4e6ca0be4dfa14270153eac7c33f:
>
> UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked down (2020-06-16 16:46:08 -0500)
>
> Thanks,
> Seth
>
> ----------------------------------------------------------------
> Christopher M. Riedl (2):
> powerpc/xmon: add read-only mode
> powerpc/xmon: Restrict when kernel is locked down
>
> Jason A. Donenfeld (1):
> UBUNTU: SAUCE: acpi: disallow loading configfs acpi tables when locked
> down
>
> Javier Martinez Canillas (1):
> efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
>
> Matthew Garrett (1):
> efi: Restrict efivar_ssdt_load when the kernel is locked down
>
> Seth Forshee (1):
> UBUNTU: [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
>
> arch/powerpc/Kconfig.debug | 8 ++
> arch/powerpc/xmon/xmon.c | 148 +++++++++++++++++++---
> debian.master/config/config.common.ubuntu | 1 +
> drivers/acpi/acpi_configfs.c | 4 +
> drivers/firmware/efi/efi.c | 5 +
> drivers/firmware/efi/test/efi_test.c | 7 +
> 6 files changed, 156 insertions(+), 17 deletions(-)
>
Acked-by: Stefan Bader <stefan.bader at canonical.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20200623/7b944518/attachment.sig>
More information about the kernel-team
mailing list