android_kernel_motorola_sm6375/arch/s390
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Peter Oberparleiter 7a0208c5b4 s390/hypfs: Enable limited access during lockdown
[ Upstream commit 3868f910440c47cd5d158776be4ba4e2186beda7 ]

When kernel lockdown is active, debugfs_locked_down() blocks access to
hypfs files that register ioctl callbacks, even if the ioctl interface
is not required for a function. This unnecessarily breaks userspace
tools that only rely on read operations.

Resolve this by registering a minimal set of file operations during
lockdown, avoiding ioctl registration and preserving access for affected
tooling.

Note that this change restores hypfs functionality when lockdown is
active from early boot (e.g. via lockdown=integrity kernel parameter),
but does not apply to scenarios where lockdown is enabled dynamically
while Linux is running.

Tested-by: Mete Durlu <meted@linux.ibm.com>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Fixes: 5496197f9b ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Alexander Gordeev <agordeev@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-28 16:21:37 +02:00
..
appldata
boot s390/ipl: add missing intersection check to ipl_report handling 2023-03-22 13:28:09 +01:00
configs locking/refcount: Consolidate implementations of refcount_t 2022-07-29 17:14:17 +02:00
crypto
hypfs s390/hypfs: Enable limited access during lockdown 2025-08-28 16:21:37 +02:00
include s390/time: Use monotonic clock in get_cycles() 2025-08-28 16:21:26 +02:00
kernel s390/stp: Remove udelay from stp_sync_clock() 2025-08-28 16:21:26 +02:00
kvm KVM: s390: Don't use %pK through tracepoints 2025-05-02 07:39:29 +02:00
lib s390/uaccess: add missing earlyclobber annotations to __clear_user() 2023-04-05 11:16:46 +02:00
mm s390/mm: Add cond_resched() to cmm_alloc/free_pages() 2024-11-08 16:20:44 +01:00
net
numa
oprofile
pci s390/pci: Fix __pcilg_mio_inuser() inline assembly 2025-06-27 11:02:58 +01:00
purgatory s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS 2025-07-17 18:24:55 +02:00
scripts
tools
Kbuild
Kconfig s390: remove unneeded 'select BUILD_BIN2C' 2022-07-07 17:36:49 +02:00
Kconfig.debug
Makefile s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS 2025-07-17 18:24:55 +02:00