Unverified Commit 980dd57a authored Dec 25, 2023 by openeuler-ci-bot Committed by Gitee Dec 25, 2023

!3439 security: restrict init parameters by configuration

Merge Pull Request from: @ci-robot 
 
PR sync from: Yi Yang <yiyang13@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/Z2LPVWUUOR7ZAZ35DO22GV3LMMI5PXVY/ 
 
https://gitee.com/openeuler/kernel/issues/I8OYXL 
 
Link:https://gitee.com/openeuler/kernel/pulls/3439

 

Reviewed-by: Lu Jialin <lujialin4@huawei.com>
Reviewed-by: Zhang Jianhua <chris.zjh@huawei.com>
Signed-off-by: Zheng Zengkai <zhengzengkai@huawei.com>

parents 6d225089 e464994b

init/main.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -573,6 +573,7 @@ static int __init unknown_bootoption(char param, char val,
		return 0;
		}

		#ifndef CONFIG_SECURITY_BOOT_INIT
		static int __init init_setup(char *str)
		{
		unsigned int i;
		@@ -601,6 +602,7 @@ static int __init rdinit_setup(char *str)
		return 1;
		}
		__setup("rdinit=", rdinit_setup);
		#endif

		#ifndef CONFIG_SMP
		static const unsigned int setup_max_cpus = NR_CPUS;

security/Kconfig

+6 −0

Original line number	Diff line number	Diff line
		@@ -249,5 +249,11 @@ config LSM

		source "security/Kconfig.hardening"

		config SECURITY_BOOT_INIT
		bool "Disable init & rdinit parameters in cmdline"
		default n
		help
		No support init and rdinit parameters in cmdline

		endmenu