tablet/grub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

commands/memrw: Disable memory reading in lockdown mode

Browse Source 
With the rest of module being blocked in lockdown mode it does not make
a lot of sense to leave memory reading enabled. This also goes in par
with disabling the dump command.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
This commit is contained in:
B Horn 2024-04-18 20:37:10 +01:00 committed by Daniel Kiper
parent 34824806ac
commit 340e4d058f
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
grub-core/commands/memrw.c
View File

@ -122,17 +122,20 @@ grub_cmd_write (grub_command_t cmd, int argc, char **argv)
GRUB_MOD_INIT(memrw) GRUB_MOD_INIT(memrw)
{ {
cmd_read_byte = cmd_read_byte =
grub_register_extcmd ("read_byte", grub_cmd_read, 0, grub_register_extcmd_lockdown ("read_byte", grub_cmd_read, 0,
N_("ADDR"), N_("Read 8-bit value from ADDR."), N_("ADDR"),
options); N_("Read 8-bit value from ADDR."),
options);
cmd_read_word = cmd_read_word =
grub_register_extcmd ("read_word", grub_cmd_read, 0, grub_register_extcmd_lockdown ("read_word", grub_cmd_read, 0,
N_("ADDR"), N_("Read 16-bit value from ADDR."), N_("ADDR"),
options); N_("Read 16-bit value from ADDR."),
options);
cmd_read_dword = cmd_read_dword =
grub_register_extcmd ("read_dword", grub_cmd_read, 0, grub_register_extcmd_lockdown ("read_dword", grub_cmd_read, 0,
N_("ADDR"), N_("Read 32-bit value from ADDR."), N_("ADDR"),
options); N_("Read 32-bit value from ADDR."),
options);
cmd_write_byte = cmd_write_byte =
grub_register_command_lockdown ("write_byte", grub_cmd_write, grub_register_command_lockdown ("write_byte", grub_cmd_write,
N_("ADDR VALUE [MASK]"), N_("ADDR VALUE [MASK]"),