Home
last modified time | relevance | path

Searched refs:lockdown (Results 1 – 25 of 26) sorted by relevance

12

/openbmc/linux/security/lockdown/
H A DKconfig2 bool "Basic module for enforcing kernel lockdown"
6 Build support for an LSM that enforces a coarse kernel lockdown
10 bool "Enable lockdown LSM early in init"
13 Enable the lockdown LSM early in boot. This is necessary in order
14 to ensure that lockdown enforcement can be carried out on kernel
16 subsystem is fully initialised. If enabled, lockdown will
20 prompt "Kernel default lockdown mode"
25 lockdown.
30 No lockdown functionality is enabled by default. Lockdown may be
31 enabled via the kernel commandline or /sys/kernel/security/lockdown.
H A Dlockdown.c161 DEFINE_EARLY_LSM(lockdown) = {
163 DEFINE_LSM(lockdown) = {
H A DMakefile1 obj-$(CONFIG_SECURITY_LOCKDOWN_LSM) += lockdown.o
/openbmc/openbmc/meta-openembedded/meta-gnome/recipes-support/xdg-desktop-portal/
H A Dxdg-desktop-portal-gtk_1.15.2.bb23 PACKAGECONFIG ?= "wallpaper appchooser lockdown settings"
28 PACKAGECONFIG[lockdown] = "-Dlockdown=enabled,-Dlockdown=disabled"
/openbmc/linux/Documentation/usb/
H A Dauthorization.rst41 Example system lockdown (lame)
44 Imagine you want to implement a lockdown so only devices of type XYZ
64 Now, device_is_my_type() is where the juice for a lockdown is. Just
77 if [ $sum = $(cat /etc/lockdown/keysum) ]
/openbmc/openbmc/poky/meta/lib/oe/
H A Dprservice.py75 def prserv_export_tofile(d, metainfo, datainfo, lockdown, nomax=False): argument
98 if lockdown:
/openbmc/linux/security/
H A DKconfig227 source "security/lockdown/Kconfig"
268 …default "landlock,lockdown,yama,loadpin,safesetid,smack,selinux,tomoyo,apparmor,bpf" if DEFAULT_SE…
269 …default "landlock,lockdown,yama,loadpin,safesetid,apparmor,selinux,smack,tomoyo,bpf" if DEFAULT_SE…
270 default "landlock,lockdown,yama,loadpin,safesetid,tomoyo,bpf" if DEFAULT_SECURITY_TOMOYO
271 default "landlock,lockdown,yama,loadpin,safesetid,bpf" if DEFAULT_SECURITY_DAC
272 default "landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf"
H A DMakefile23 obj-$(CONFIG_SECURITY_LOCKDOWN_LSM) += lockdown/
/openbmc/linux/drivers/input/rmi4/
H A Drmi_f34.h183 u16 lockdown; member
220 struct block_data lockdown; member
H A Drmi_f34v7.c434 blkcount->lockdown = partition_length; in rmi_f34v7_parse_partition_table()
437 __func__, blkcount->lockdown); in rmi_f34v7_parse_partition_table()
905 f34->v7.img.lockdown.data = content; in rmi_f34v7_parse_img_header_10_bl_container()
906 f34->v7.img.lockdown.size = length; in rmi_f34v7_parse_img_header_10_bl_container()
/openbmc/linux/arch/powerpc/configs/
H A Dsecurity.config3 # This is the equivalent of booting with lockdown=integrity
/openbmc/linux/arch/openrisc/configs/
H A Dor1klitex_defconfig51 CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf"
/openbmc/u-boot/drivers/spi/
H A Dich.h176 bool lockdown; /* lock down controller settings? */ member
H A Dich.c608 if (plat->lockdown) { in ich_spi_probe()
683 plat->lockdown = fdtdec_get_bool(gd->fdt_blob, node, in ich_spi_ofdata_to_platdata()
/openbmc/linux/arch/mips/configs/
H A Dgcw0_defconfig147 CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
/openbmc/linux/arch/powerpc/xmon/
H A Dxmon.c306 static bool lockdown; in xmon_is_locked_down() local
308 if (!lockdown) { in xmon_is_locked_down()
309 lockdown = !!security_locked_down(LOCKDOWN_XMON_RW); in xmon_is_locked_down()
310 if (lockdown) { in xmon_is_locked_down()
322 return lockdown; in xmon_is_locked_down()
/openbmc/linux/kernel/module/
H A DKconfig202 CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via
204 of the lockdown policy.
/openbmc/openbmc/poky/documentation/migration-guides/
H A Dmigration-3.1.rst176 pointed to local files; the lockdown file is no longer needed at all.
/openbmc/openbmc/meta-security/docs/
H A Doverview.txt9 Bastille is a system hardening / lockdown program which enhances the
/openbmc/openbmc/poky/meta/classes-global/
H A Dpackage.bbclass291 bb.fatal("Can NOT get PRAUTO from lockdown exported file")
/openbmc/qemu/
H A DMAINTAINERS4127 F: .github/workflows/lockdown.yml
/openbmc/linux/Documentation/admin-guide/
H A Dkernel-parameters.txt2921 lockdown= [SECURITY]
2923 Enable the kernel lockdown feature. If set to
/openbmc/
Dopengrok1.0.log2189 2025-03-16 03:00:41.094-0500 FINEST t467 IndexDatabase.setupDeletedUids: live doc: '/openbmc/linux/security/lockdown/lockdown.c' (570) at 20240405153053477
[all...]
Dopengrok2.0.log2220 2025-03-15 03:00:41.767-0500 FINEST t473 IndexDatabase.setupDeletedUids: live doc: '/openbmc/linux/security/lockdown/lockdown.c' (570) at 20240405153053477
[all...]
/openbmc/linux/
H A Dopengrok0.0.log[all...]

12