linux-stable/arch/s390
Peter Oberparleiter 28844fd512 s390/hypfs: Enable limited access during lockdown
[ Upstream commit 3868f91044 ]

When kernel lockdown is active, debugfs_locked_down() blocks access to
hypfs files that register ioctl callbacks, even if the ioctl interface
is not required for a function. This unnecessarily breaks userspace
tools that only rely on read operations.

Resolve this by registering a minimal set of file operations during
lockdown, avoiding ioctl registration and preserving access for affected
tooling.

Note that this change restores hypfs functionality when lockdown is
active from early boot (e.g. via lockdown=integrity kernel parameter),
but does not apply to scenarios where lockdown is enabled dynamically
while Linux is running.

Tested-by: Mete Durlu <meted@linux.ibm.com>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Fixes: 5496197f9b ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Alexander Gordeev <agordeev@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-28 16:26:19 +02:00
..
appldata
boot
configs
crypto
hypfs s390/hypfs: Enable limited access during lockdown 2025-08-28 16:26:19 +02:00
include s390/time: Use monotonic clock in get_cycles() 2025-08-28 16:25:55 +02:00
kernel s390/stp: Remove udelay from stp_sync_clock() 2025-08-28 16:25:56 +02:00
kvm KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY 2025-06-27 11:07:30 +01:00
lib
mm mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() 2025-08-28 16:26:11 +02:00
net s390/bpf: Store backchain even for leaf progs 2025-06-27 11:07:11 +01:00
pci s390/pci: Do not try re-enabling load/store if device is disabled 2025-07-10 15:59:43 +02:00
purgatory
tools
Kbuild
Kconfig
Kconfig.debug
Makefile