Matthew Garrett eb627e1772 PCI: Lock down BAR access when the kernel is locked down ... Any hardware that can potentially generate DMA has to be locked down in order to avoid it being possible for an attacker to modify kernel code, allowing them to circumvent disabled module loading or module signing. Default to paranoid - in future we can potentially relax this for sufficiently IOMMU-isolated devices. Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Matthew Garrett <mjg59@google.com> Acked-by: Bjorn Helgaas <bhelgaas@google.com> Reviewed-by: Kees Cook <keescook@chromium.org> cc: linux-pci@vger.kernel.org Signed-off-by: James Morris <jmorris@namei.org>		2019-08-19 21:54:15 -07:00
..
Kconfig	lockdown: Enforce module signatures if the kernel is locked down	2019-08-19 21:54:15 -07:00
lockdown.c	PCI: Lock down BAR access when the kernel is locked down	2019-08-19 21:54:15 -07:00
Makefile