From: Kees Cook <keescook@chromium.org>
Date: Tue, 25 Feb 2014 18:28:04 +0000 (-0800)
Subject: security: introduce kernel_fw_from_file hook
X-Git-Tag: cleanup-for-v3.18~110^2~9^2~2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=13752fe2d7f2d41c2fd92a5d1b1c6e38c4de0c05;p=pandora-kernel.git

security: introduce kernel_fw_from_file hook

In order to validate the contents of firmware being loaded, there must be
a hook to evaluate any loaded firmware that wasn't built into the kernel
itself. Without this, there is a risk that a root user could load malicious
firmware designed to mount an attack against kernel memory (e.g. via DMA).

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Takashi Iwai <tiwai@suse.de>
---

Reading git-diff-tree failed