This is a note to let you know that I've just added the patch titled clk: Emit a stern warning with writable debugfs enabled to the 5.15-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: clk-emit-a-stern-warning-with-writable-debugfs-enabled.patch and it can be found in the queue-5.15 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 489a71964f9d74e697a12cd0ace20ed829eb1f93 Mon Sep 17 00:00:00 2001 From: Stephen Boyd <sboyd@xxxxxxxxxx> Date: Thu, 9 Dec 2021 17:34:05 -0800 Subject: clk: Emit a stern warning with writable debugfs enabled From: Stephen Boyd <sboyd@xxxxxxxxxx> commit 489a71964f9d74e697a12cd0ace20ed829eb1f93 upstream. We don't want vendors to be enabling this part of the clk code and shipping it to customers. Exposing the ability to change clk frequencies and parents via debugfs is potentially damaging to the system if folks don't know what they're doing. Emit a strong warning so that the message is clear: don't enable this outside of development systems. Fixes: 37215da5553e ("clk: Add support for setting clk_rate via debugfs") Cc: Geert Uytterhoeven <geert+renesas@xxxxxxxxx> Link: https://lore.kernel.org/r/20211210014237.2130300-1-sboyd@xxxxxxxxxx Signed-off-by: Stephen Boyd <sboyd@xxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/clk/clk.c | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) --- a/drivers/clk/clk.c +++ b/drivers/clk/clk.c @@ -3340,6 +3340,24 @@ static int __init clk_debug_init(void) { struct clk_core *core; +#ifdef CLOCK_ALLOW_WRITE_DEBUGFS + pr_warn("\n"); + pr_warn("********************************************************************\n"); + pr_warn("** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE **\n"); + pr_warn("** **\n"); + pr_warn("** WRITEABLE clk DebugFS SUPPORT HAS BEEN ENABLED IN THIS KERNEL **\n"); + pr_warn("** **\n"); + pr_warn("** This means that this kernel is built to expose clk operations **\n"); + pr_warn("** such as parent or rate setting, enabling, disabling, etc. **\n"); + pr_warn("** to userspace, which may compromise security on your system. **\n"); + pr_warn("** **\n"); + pr_warn("** If you see this message and you are not debugging the **\n"); + pr_warn("** kernel, report this immediately to your vendor! **\n"); + pr_warn("** **\n"); + pr_warn("** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE **\n"); + pr_warn("********************************************************************\n"); +#endif + rootdir = debugfs_create_dir("clk", NULL); debugfs_create_file("clk_summary", 0444, rootdir, &all_lists, Patches currently in stable-queue which might be from sboyd@xxxxxxxxxx are queue-5.15/clk-bcm-2835-pick-the-closest-clock-rate.patch queue-5.15/clk-emit-a-stern-warning-with-writable-debugfs-enabled.patch queue-5.15/clk-stm32-fix-ltdc-s-clock-turn-off-by-clk_disable_u.patch queue-5.15/clk-qcom-gcc-sc7280-mark-gcc_cfg_noc_lpass_clk-alway.patch queue-5.15/clk-si5341-fix-clock-hw-provider-cleanup.patch queue-5.15/clk-bm1880-remove-kfrees-on-static-allocations.patch queue-5.15/clk-bcm-2835-remove-rounding-up-the-dividers.patch