security: introduce kernel_fw_from_file hook
In order to validate the contents of firmware being loaded, there must be a hook to evaluate any loaded firmware that wasn't built into the kernel itself. Without this, there is a risk that a root user could load malicious firmware designed to mount an attack against kernel memory (e.g. via DMA). Signed-off-by:Kees Cook <keescook@chromium.org> Reviewed-by:
Takashi Iwai <tiwai@suse.de>
parent
7d8b6c63
Please register or sign in to comment