On Wed, Jun 26, 2019 at 6:49 PM Daniel Axtens <dja@xxxxxxxxxx> wrote: > > Matthew Garrett <matthewgarrett@xxxxxxxxxx> writes: > > + if (kp->flags & KERNEL_PARAM_FL_HWPARAM && > > + security_locked_down(LOCKDOWN_MODULE_PARAMETERS)) > > + return false; > > + return true; > > } > > Should this test occur before tainting the kernel? Seems reasonable.
