[PATCH V38 15/29] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down

Matthew Garrett mjg59 at google.com
Wed Aug 14 17:14:54 UTC 2019


On Wed, Aug 14, 2019 at 12:25 AM Borislav Petkov <bp at alien8.de> wrote:
> #if defined(CONFIG_RANDOMIZE_BASE) && defined(CONFIG_MEMORY_HOTREMOVE)
>
> false and thus not available to early code anymore.

We explicitly don't want to pay attention to the acpi_rsdp kernel
parameter in early boot except for the case of finding the SRAT table,
and we only need that if CONFIG_RANDOMIZE_BASE and
CONFIG_MEMORY_HOTREMOVE are set. However, we *do* want to tell the
actual kernel where the RSDP is if we found it via some other means,
so we can't just clear the boot parameters value. The kernel proper
will parse the command line again and will then (if lockdown isn't
enabled) override the actual value we passed up in boot params. So I
think this is ok?

(Sorry for not Cc:ing x86, clear oversight on my part)



More information about the Linux-security-module-archive mailing list