Re: [PATCH V40 14/29] ACPI: Limit access to custom_method when the kernel is locked down

2019-08-20 Thread Rafael J. Wysocki
On Tuesday, August 20, 2019 2:17:50 AM CEST Matthew Garrett wrote: > From: Matthew Garrett > > custom_method effectively allows arbitrary access to system memory, making > it possible for an attacker to circumvent restrictions on module loading. > Disable it if the kernel is locked down. > >

[PATCH V40 14/29] ACPI: Limit access to custom_method when the kernel is locked down

2019-08-19 Thread Matthew Garrett
From: Matthew Garrett custom_method effectively allows arbitrary access to system memory, making it possible for an attacker to circumvent restrictions on module loading. Disable it if the kernel is locked down. Signed-off-by: Matthew Garrett Signed-off-by: David Howells Reviewed-by: Kees