]> git.proxmox.com Git - grub2.git/commit
commands/setpci: Restrict setpci command when locked down
authorJavier Martinez Canillas <javierm@redhat.com>
Wed, 24 Feb 2021 21:59:59 +0000 (22:59 +0100)
committerColin Watson <cjwatson@debian.org>
Sun, 13 Jun 2021 23:40:45 +0000 (00:40 +0100)
commitedc3a08bd5384cc7fa4e931a8c18a8ab0249af65
treebac168af6294a1d071149de583b443f71c210b37
parente3e3fca4606ed2f5830de7c486142e1a5794e1da
commands/setpci: Restrict setpci command when locked down

This command can set PCI devices register values, which makes it dangerous
in a locked down configuration. Restrict it so can't be used on this setup.

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Patch-Name: 2021-02-security/009-commands-setpci-Restrict-setpci-command-when-locked-down.patch
grub-core/commands/setpci.c