linux-stable/arch
Peter Oberparleiter 28844fd512 s390/hypfs: Enable limited access during lockdown
[ Upstream commit 3868f91044 ]

When kernel lockdown is active, debugfs_locked_down() blocks access to
hypfs files that register ioctl callbacks, even if the ioctl interface
is not required for a function. This unnecessarily breaks userspace
tools that only rely on read operations.

Resolve this by registering a minimal set of file operations during
lockdown, avoiding ioctl registration and preserving access for affected
tooling.

Note that this change restores hypfs functionality when lockdown is
active from early boot (e.g. via lockdown=integrity kernel parameter),
but does not apply to scenarios where lockdown is enabled dynamically
while Linux is running.

Tested-by: Mete Durlu <meted@linux.ibm.com>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Fixes: 5496197f9b ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Alexander Gordeev <agordeev@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-08-28 16:26:19 +02:00
..
alpha
arc
arm ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS 2025-08-28 16:26:10 +02:00
arm64 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support 2025-08-28 16:26:15 +02:00
csky
hexagon
ia64
loongarch LoongArch: BPF: Fix jump offset calculation in tailcall 2025-08-28 16:25:49 +02:00
m68k m68k: Fix lost column on framebuffer debug console 2025-08-28 16:26:05 +02:00
microblaze
mips lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap 2025-08-28 16:26:05 +02:00
nios2
openrisc
parisc parisc: Update comments in make_insert_tlb 2025-08-28 16:26:08 +02:00
powerpc powerpc: floppy: Add missing checks after DMA map 2025-08-28 16:25:57 +02:00
riscv RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs 2025-06-27 11:07:41 +01:00
s390 s390/hypfs: Enable limited access during lockdown 2025-08-28 16:26:19 +02:00
sh sh: Do not use hyphen in exported variable name 2025-08-15 12:05:04 +02:00
sparc
um um: Re-evaluate thread flags repeatedly 2025-08-28 16:25:56 +02:00
x86 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper 2025-08-28 16:26:17 +02:00
xtensa
.gitignore
Kconfig