32 lines
1.1 KiB
Diff
32 lines
1.1 KiB
Diff
From: Josh Boyer <jwboyer@fedoraproject.org>
|
|
Date: Wed, 8 Nov 2017 15:11:33 +0000
|
|
Subject: [09/29] hibernate: Disable when the kernel is locked down
|
|
Origin: https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/commit?id=480ddca2a40c2efd1c01cfa20d8f6c1377ddafe3
|
|
|
|
There is currently no way to verify the resume image when returning
|
|
from hibernate. This might compromise the signed modules trust model,
|
|
so until we can work with signed hibernate images we disable it when the
|
|
kernel is locked down.
|
|
|
|
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
|
|
Signed-off-by: David Howells <dhowells@redhat.com>
|
|
Reviewed-by: "Lee, Chun-Yi" <jlee@suse.com>
|
|
cc: linux-pm@vger.kernel.org
|
|
---
|
|
kernel/power/hibernate.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/kernel/power/hibernate.c b/kernel/power/hibernate.c
|
|
index a5c36e9c56a6..f2eafefeec50 100644
|
|
--- a/kernel/power/hibernate.c
|
|
+++ b/kernel/power/hibernate.c
|
|
@@ -70,7 +70,7 @@ static const struct platform_hibernation_ops *hibernation_ops;
|
|
|
|
bool hibernation_available(void)
|
|
{
|
|
- return (nohibernate == 0);
|
|
+ return nohibernate == 0 && !kernel_is_locked_down("Hibernation");
|
|
}
|
|
|
|
/**
|