KDB: Kiosk (reduced capabilities) mode
Get series with b4
b4 am [email protected]Versions newest first · linked by author and title
- v1 Latest posting 2/27 patches 0 repliesNew
- v1 posting 1/27 patches 1 replySuperseded
Patches in v1 posting 2/2 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/7 | kdb: Remove currently unused kdbtab_t->cmd_flagskernel/ kernel/ | +0 | 0 replies | |
| 2/7 | kdb: Rename kdb_repeat_t to kdb_cmdflags_t, cmd_repeat to cmd_flagsinclude/ kernel/ kernel/ | +6 | 0 replies | |
| 3/7 | kdb: Rename kdb_register_repeat() to kdb_register_flags()include/ kernel/ kernel/ +1 more | +58 | 0 replies | |
| 4/7 | kdb: Use KDB_REPEAT_* values as flagsinclude/ kernel/ | +9 | 0 replies | |
| 5/7 | kdb: Remove KDB_REPEAT_NONE flaginclude/ kernel/ kernel/ +1 more | +34 | 0 replies | |
| 6/7 | kdb: Mark safe commands as KDB_SAFE and KDB_SAFE_NO_ARGSinclude/ kernel/ kernel/ | +25 | 0 replies | |
| 7/7 | kdb: Add kiosk modeinclude/ kernel/ | +20 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH resend 0/7] KDB: Kiosk (reduced capabilities) mode
Hi Andrew, Jason,
And yet another set that folks seem to be too busy to look into. :)
The rationale for the series is this:
This patchset implements "kiosk" mode for KDB debugger. The mode reduces kdb features, so that it is no longer possible to leak sensitive data via the debugger, and not possible to change program flow in a predefined manner by an ordinary user. The root can control the capability.
It is useful on phones with an easy access to a debugger console (e.g. thru a headphone mini-jack), or on a public PCs (but we still want to let the user somewhat diagnose the problem via KDB-via-KMS).
Later we might want to implement password-protected "unlock" command (with the hash of the password passed via some sysfs attribute).
There are a few patches, some are just cleanups, some are churn-ish cleanups, but inevitable. And the rest implements the mode -- after all the preparations, everything is pretty straightforward.
Thanks!
Anton.
--
include/linux/kdb.h | 20 ++-- kernel/debug/kdb/kdb_bp.c | 24 ++--- kernel/debug/kdb/kdb_main.c | 189 +++++++++++++++++---------------- kernel/debug/kdb/kdb_private.h | 3 +- kernel/trace/trace_kdb.c | 4 +- 5 files changed, 125 insertions(+), 115 deletions(-)