Disallow access to /proc/kcore when the kernel is locked down to prevent access to cryptographic data. This is limited to lockdown confidentiality mode and is still permitted in integrity mode.
Showing the changes to include/linux (1 of 3 files). Show all
Unified · Split
| @@ -116,6 +116,7 @@ enum lockdown_reason { · 115 unmodified lines | |||
| 116 | LOCKDOWN_MODULE_PARAMETERS, | 116 | LOCKDOWN_MODULE_PARAMETERS, |
| 117 | LOCKDOWN_MMIOTRACE, | 117 | LOCKDOWN_MMIOTRACE, |
| 118 | LOCKDOWN_INTEGRITY_MAX, | 118 | LOCKDOWN_INTEGRITY_MAX, |
| 119 | LOCKDOWN_KCORE, | ||
| 119 | LOCKDOWN_CONFIDENTIALITY_MAX, | 120 | LOCKDOWN_CONFIDENTIALITY_MAX, |
| 120 | }; | 121 | }; |
| 121 | 122 | ||