linux/drivers/firmware/efi
Greg Kroah-Hartman 9a9c97f48d efi: Move some sysfs files to be read-only by root
commit af97a77bc0 upstream.

Thanks to the scripts/leaking_addresses.pl script, it was found that
some EFI values should not be readable by non-root users.

So make them root-only, and to do that, add a __ATTR_RO_MODE() macro to
make this easier, and use it in other places at the same time.

Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Tested-by: Dave Young <dyoung@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Matt Fleming <matt@codeblueprint.co.uk>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: linux-efi@vger.kernel.org
Link: http://lkml.kernel.org/r/20171206095010.24170-2-ard.biesheuvel@linaro.org
Signed-off-by: Ingo Molnar <mingo@kernel.org>
[bwh: Backported to 3.16: drop changes in esrt.c]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2018-03-03 15:51:46 +00:00
..
arm-stub.c efi/arm64: ignore dtb= when UEFI SecureBoot is enabled 2014-04-30 19:57:06 +01:00
cper.c Move cper.c from drivers/acpi/apei to drivers/firmware/efi 2013-10-31 11:27:04 -07:00
efi-pstore.c efi-pstore: Fix an overflow on 32-bit builds 2014-06-27 07:30:32 +01:00
efi-stub-helper.c efi/libstub: Allocate headspace in efi_get_memory_map() 2016-11-20 01:17:23 +00:00
efi.c efi: Move some sysfs files to be read-only by root 2018-03-03 15:51:46 +00:00
efivars.c efi: Make our variable validation list include the guid 2016-03-24 10:01:19 +00:00
fdt.c efi/libstub: Allocate headspace in efi_get_memory_map() 2016-11-20 01:17:23 +00:00
Kconfig efi: add helper function to get UEFI params from FDT 2014-04-30 19:49:46 +01:00
Makefile efi/reboot: Add generic wrapper around EfiResetSystem() 2015-05-12 09:36:34 +01:00
reboot.c x86/reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag 2015-05-12 09:36:34 +01:00
runtime-map.c efi: Move some sysfs files to be read-only by root 2018-03-03 15:51:46 +00:00
vars.c efi: Fix out-of-bounds read in variable_matches() 2016-06-15 21:29:26 +01:00