s390/setup: Actually init kernel lock down

Bug #1843961 reported by Dimitri John Ledkov on 2019-09-13
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu on IBM z Systems
Undecided
Unassigned
linux (Ubuntu)
Undecided
Unassigned

Bug Description

Kernel lock down isn't initalized in common but in arch code. So
initialize it for s390 as well.

From: Philipp Rudo <email address hidden>

BugLink: https://bugs.launchpad.net/bugs/1843961

Kernel lock down isn't initalized in common but in arch code. So
initialize it for s390 as well.

Signed-off-by: Philipp Rudo <email address hidden>
Signed-off-by: Dimitri John Ledkov <email address hidden>
---
 arch/s390/kernel/setup.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/arch/s390/kernel/setup.c b/arch/s390/kernel/setup.c
index 253177900950..2ba122f1dd4f 100644
--- a/arch/s390/kernel/setup.c
+++ b/arch/s390/kernel/setup.c
@@ -49,6 +49,7 @@
 #include <linux/memory.h>
 #include <linux/compat.h>
 #include <linux/start_kernel.h>
+#include <linux/security.h>

 #include <asm/boot_data.h>
 #include <asm/ipl.h>
@@ -1107,6 +1108,7 @@ void __init setup_arch(char **cmdline_p)
   pr_info("Linux is running as a guest in 64-bit mode\n");

  log_component_list();
+ init_lockdown();

  /* Have one command line that is parsed and saved in /proc/cmdline */
  /* boot_command_line has been already set up in early.c */
--
2.20.1

Changed in linux (Ubuntu):
status: New → Triaged
Frank Heimes (frank-heimes) wrote :

[PATCH][UNSTABLE][EOAN] UBUNTU: SAUCE: (lockdown) s390/setup: Actually init kernel lock down
https://lists.ubuntu.com/archives/kernel-team/2019-September/103722.html

Changed in ubuntu-z-systems:
status: New → Triaged
tags: added: s390x
Seth Forshee (sforshee) on 2019-09-16
Changed in linux (Ubuntu):
status: Triaged → Fix Committed

On Sat, Sep 14, 2019 at 12:05:04AM +0100, Dimitri John Ledkov wrote:
> From: Philipp Rudo <email address hidden>
>
> BugLink: https://bugs.launchpad.net/bugs/1843961
>
> Kernel lock down isn't initalized in common but in arch code. So
> initialize it for s390 as well.
>
> Signed-off-by: Philipp Rudo <email address hidden>
> Signed-off-by: Dimitri John Ledkov <email address hidden>

Applied to eoan/master-next, thanks!

Changed in ubuntu-z-systems:
status: Triaged → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 5.3.0-12.13

---------------
linux (5.3.0-12.13) eoan; urgency=medium

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Packaging] Add lz4 build dependency for s390x

  * Miscellaneous Ubuntu changes
    - SAUCE: Remove spl and zfs source

linux (5.3.0-11.12) eoan; urgency=medium

  * eoan/linux: 5.3.0-11.12 -proposed tracker (LP: #1844144)

  * Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
    adapters(SAS3.5 onwards) (LP: #1838751)
    - PCI: Restore Resizable BAR size bits correctly for 1MB BARs

  * s390/setup: Actually init kernel lock down (LP: #1843961)
    - SAUCE: (lockdown) s390/setup: Actually init kernel lock down

  * cherrypick has_sipl fix (LP: #1843960)
    - SAUCE: s390/sclp: Fix bit checked for has_sipl

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Config]: Switch kernel compression from LZO to LZ4 on s390x

  * Installation fails on eoan/PowerVM : missing /dev/nvram (LP: #1837726)
    - [Config] CONFIG_NVRAM=y for ppc64el

  * Miscellaneous Ubuntu changes
    - [Config]: remove nvram from ppc64el modules ABI
    - [Config] Update annotations for recent config changes
    - SAUCE: sched: Add __ASSEMBLY__ guards around struct clone_args
    - SAUCE: i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
    - SAUCE: arm64: dts: qcom: Add Lenovo Yoga C630
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.3

 -- Seth Forshee <email address hidden> Tue, 17 Sep 2019 13:36:26 +0200

Changed in linux (Ubuntu):
status: Fix Committed → Fix Released
Changed in ubuntu-z-systems:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers