s390/setup: Actually init kernel lock down

Bug #1843961 reported by Dimitri John Ledkov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu on IBM z Systems
Fix Released
Undecided
Unassigned
linux (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Kernel lock down isn't initalized in common but in arch code. So
initialize it for s390 as well.

Tags: s390x
Revision history for this message
Dimitri John Ledkov (xnox) wrote : [PATCH][UNSTABLE][EOAN] UBUNTU: SAUCE: (lockdown) s390/setup: Actually init kernel lock down

From: Philipp Rudo <email address hidden>

BugLink: https://bugs.launchpad.net/bugs/1843961

Kernel lock down isn't initalized in common but in arch code. So
initialize it for s390 as well.

Signed-off-by: Philipp Rudo <email address hidden>
Signed-off-by: Dimitri John Ledkov <email address hidden>
---
 arch/s390/kernel/setup.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/arch/s390/kernel/setup.c b/arch/s390/kernel/setup.c
index 253177900950..2ba122f1dd4f 100644
--- a/arch/s390/kernel/setup.c
+++ b/arch/s390/kernel/setup.c
@@ -49,6 +49,7 @@
 #include <linux/memory.h>
 #include <linux/compat.h>
 #include <linux/start_kernel.h>
+#include <linux/security.h>

 #include <asm/boot_data.h>
 #include <asm/ipl.h>
@@ -1107,6 +1108,7 @@ void __init setup_arch(char **cmdline_p)
   pr_info("Linux is running as a guest in 64-bit mode\n");

  log_component_list();
+ init_lockdown();

  /* Have one command line that is parsed and saved in /proc/cmdline */
  /* boot_command_line has been already set up in early.c */
--
2.20.1

Changed in linux (Ubuntu):
status: New → Triaged
Revision history for this message
Frank Heimes (fheimes) wrote :

[PATCH][UNSTABLE][EOAN] UBUNTU: SAUCE: (lockdown) s390/setup: Actually init kernel lock down
https://lists.ubuntu.com/archives/kernel-team/2019-September/103722.html

Changed in ubuntu-z-systems:
status: New → Triaged
tags: added: s390x
Seth Forshee (sforshee)
Changed in linux (Ubuntu):
status: Triaged → Fix Committed
Revision history for this message
Seth Forshee (sforshee) wrote : APPLIED: [PATCH][UNSTABLE][EOAN] UBUNTU: SAUCE: (lockdown) s390/setup: Actually init kernel lock down

On Sat, Sep 14, 2019 at 12:05:04AM +0100, Dimitri John Ledkov wrote:
> From: Philipp Rudo <email address hidden>
>
> BugLink: https://bugs.launchpad.net/bugs/1843961
>
> Kernel lock down isn't initalized in common but in arch code. So
> initialize it for s390 as well.
>
> Signed-off-by: Philipp Rudo <email address hidden>
> Signed-off-by: Dimitri John Ledkov <email address hidden>

Applied to eoan/master-next, thanks!

Frank Heimes (fheimes)
Changed in ubuntu-z-systems:
status: Triaged → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 5.3.0-12.13

---------------
linux (5.3.0-12.13) eoan; urgency=medium

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Packaging] Add lz4 build dependency for s390x

  * Miscellaneous Ubuntu changes
    - SAUCE: Remove spl and zfs source

linux (5.3.0-11.12) eoan; urgency=medium

  * eoan/linux: 5.3.0-11.12 -proposed tracker (LP: #1844144)

  * Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
    adapters(SAS3.5 onwards) (LP: #1838751)
    - PCI: Restore Resizable BAR size bits correctly for 1MB BARs

  * s390/setup: Actually init kernel lock down (LP: #1843961)
    - SAUCE: (lockdown) s390/setup: Actually init kernel lock down

  * cherrypick has_sipl fix (LP: #1843960)
    - SAUCE: s390/sclp: Fix bit checked for has_sipl

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Config]: Switch kernel compression from LZO to LZ4 on s390x

  * Installation fails on eoan/PowerVM : missing /dev/nvram (LP: #1837726)
    - [Config] CONFIG_NVRAM=y for ppc64el

  * Miscellaneous Ubuntu changes
    - [Config]: remove nvram from ppc64el modules ABI
    - [Config] Update annotations for recent config changes
    - SAUCE: sched: Add __ASSEMBLY__ guards around struct clone_args
    - SAUCE: i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
    - SAUCE: arm64: dts: qcom: Add Lenovo Yoga C630
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.3

 -- Seth Forshee <email address hidden> Tue, 17 Sep 2019 13:36:26 +0200

Changed in linux (Ubuntu):
status: Fix Committed → Fix Released
Frank Heimes (fheimes)
Changed in ubuntu-z-systems:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.