FAILED: patch "[PATCH] cxl/pci: Fix lockdown level" failed to apply to 5.13-stable tree
Subsystems (2)
[email protected]
maintainerThe patch below does not apply to the 5.13-stable tree.
If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <[email protected]>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 9e56614c44b994b78fc9fcb2070bcbe3f5df0d7b Mon Sep 17 00:00:00 2001
From: Dan Williams <[email protected]>
Date: Fri, 3 Sep 2021 19:20:45 -0700
Subject: [PATCH] cxl/pci: Fix lockdown level
A proposed rework of security_locked_down() users identified that the cxl_pci driver was passing the wrong lockdown_reason. Update cxl_mem_raw_command_allowed() to fail raw command access when raw pci access is also disabled.
Fixes 13237183c735 ("cxl/mem: Add a "RAW" send command")
Cc Ben Widawsky <[email protected]>
Cc Jonathan Cameron <[email protected]>
Cc <[email protected]>
Cc Ondrej Mosnacek <[email protected]>
Cc Paul Moore <[email protected]>
Link https://lore.kernel.org/r/163072204525.2250120.16615792476976546735.stgit@dwillia2-desk3.amr.corp.intel.com open here
Signed-off-by Dan Williams <[email protected]>
drivers/cxl/pci.c +1 -1
@@ -575,7 +575,7 @@ static bool cxl_mem_raw_command_allowed(u16 opcode)if (!IS_ENABLED (CONFIG_CXL_MEM_RAW_COMMANDS ))return false; -if (security_locked_down (LOCKDOWN_NONE )) +if (security_locked_down (LOCKDOWN_PCI_ACCESS ))return false;if (cxl_raw_allow_all)