Kees Cook 13752fe2d7 security: introduce kernel_fw_from_file hook ...

In order to validate the contents of firmware being loaded, there must be
a hook to evaluate any loaded firmware that wasn't built into the kernel
itself. Without this, there is a risk that a root user could load malicious
firmware designed to mount an attack against kernel memory (e.g. via DMA).

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Takashi Iwai <tiwai@suse.de>

2014-07-25 11:47:45 -07:00

25 KiB

Raw Blame History

View Raw