|
|
Subscribe / Log in / New account

KDB: Kiosk (reduced capabilities) mode

From:  Anton Vorontsov <anton.vorontsov@linaro.org>
To:  Jason Wessel <jason.wessel@windriver.com>
Subject:  [PATCH 0/7] KDB: Kiosk (reduced capabilities) mode
Date:  Mon, 15 Oct 2012 18:17:24 -0700
Message-ID:  <20121016011724.GB23146@lizard>
Cc:  Colin Cross <ccross@google.com>, Alan Cox <alan@lxorguk.ukuu.org.uk>, John Stultz <john.stultz@linaro.org>, linux-kernel@vger.kernel.org, linaro-kernel@lists.linaro.org, patches@linaro.org, kernel-team@android.com, kgdb-bugreport@lists.sourceforge.net
Archive‑link:  Article

Hello Jason,

Just as promised, I'm resending the series after the merge window.

This patchset implements "kiosk" mode for KDB debugger. The mode reduces
kdb features, so that it is no longer possible to leak sensitive data via
the debugger, and not possible to change program flow in a predefined
manner by an ordinary user. Root can control the capability.

There are a few patches, some are just cleanups, some are churn-ish
cleanups, but inevitable. And the rest implements the mode -- after all
the preparations, everything is pretty straightforward.

Thanks!
Anton.

--
 include/linux/kdb.h            |  20 ++--
 kernel/debug/kdb/kdb_bp.c      |  24 ++---
 kernel/debug/kdb/kdb_main.c    | 189 ++++++++++++++++++----------------
 kernel/debug/kdb/kdb_private.h |   3 +-
 kernel/trace/trace_kdb.c       |   4 +-
 5 files changed, 125 insertions(+), 115 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds