Peter Oberparleiter 13b8655986 s390/hypfs: Enable limited access during lockdown ... [ Upstream commit 3868f91044 ] When kernel lockdown is active, debugfs_locked_down() blocks access to hypfs files that register ioctl callbacks, even if the ioctl interface is not required for a function. This unnecessarily breaks userspace tools that only rely on read operations. Resolve this by registering a minimal set of file operations during lockdown, avoiding ioctl registration and preserving access for affected tooling. Note that this change restores hypfs functionality when lockdown is active from early boot (e.g. via lockdown=integrity kernel parameter), but does not apply to scenarios where lockdown is enabled dynamically while Linux is running. Tested-by: Mete Durlu <meted@linux.ibm.com> Reviewed-by: Vasily Gorbik <gor@linux.ibm.com> Fixes: 5496197f9b ("debugfs: Restrict debugfs when the kernel is locked down") Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com> Signed-off-by: Alexander Gordeev <agordeev@linux.ibm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-08-28 16:34:51 +02:00
..
appldata
boot	s390/mm: Do not map lowcore with identity mapping	2025-08-28 16:34:49 +02:00
configs	This update includes the following changes:	2025-05-26 13:47:28 -07:00
crypto	crypto: s390/sha3 - Use cpu byte-order when exporting	2025-08-15 16:38:58 +02:00
hypfs	s390/hypfs: Enable limited access during lockdown	2025-08-28 16:34:51 +02:00
include	s390/time: Use monotonic clock in get_cycles()	2025-08-20 18:41:06 +02:00
kernel	s390/early: Copy last breaking event address to pt_regs	2025-08-20 18:41:11 +02:00
kvm	KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY	2025-06-05 22:02:22 -07:00
lib	This push fixes a loongarch header regression and a module name	2025-06-03 08:03:45 -07:00
mm	mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()	2025-08-20 18:41:41 +02:00
net	s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again	2025-07-16 18:32:31 -07:00
pci	s390/pci: Allow automatic recovery with minimal driver support	2025-06-28 18:59:00 +02:00
purgatory
tools
Kbuild
Kconfig
Kconfig.debug
Makefile
Makefile.postlink