From: Javier Martinez Canillas <javi...@redhat.com>

The gdbstub* commands allow to start and control a GDB stub running on
local host that can be used to connect from a remote debugger. Restrict
this functionality when the GRUB is locked down.

Signed-off-by: Javier Martinez Canillas <javi...@redhat.com>
Reviewed-by: Daniel Kiper <daniel.ki...@oracle.com>
---
 grub-core/gdb/gdb.c | 32 ++++++++++++++++++--------------
 1 file changed, 18 insertions(+), 14 deletions(-)

diff --git a/grub-core/gdb/gdb.c b/grub-core/gdb/gdb.c
index 847a1e1e3..1818cb6f8 100644
--- a/grub-core/gdb/gdb.c
+++ b/grub-core/gdb/gdb.c
@@ -75,20 +75,24 @@ static grub_command_t cmd, cmd_stop, cmd_break;
 GRUB_MOD_INIT (gdb)
 {
   grub_gdb_idtinit ();
-  cmd = grub_register_command ("gdbstub", grub_cmd_gdbstub,
-                              N_("PORT"), 
-                              /* TRANSLATORS: GDB stub is a small part of
-                                 GDB functionality running on local host
-                                 which allows remote debugger to
-                                 connect to it.  */
-                              N_("Start GDB stub on given port"));
-  cmd_break = grub_register_command ("gdbstub_break", grub_cmd_gdb_break,
-                                    /* TRANSLATORS: this refers to triggering
-                                       a breakpoint so that the user will land
-                                       into GDB.  */
-                                    0, N_("Break into GDB"));
-  cmd_stop = grub_register_command ("gdbstub_stop", grub_cmd_gdbstop,
-                                   0, N_("Stop GDB stub"));
+  cmd = grub_register_command_lockdown ("gdbstub", grub_cmd_gdbstub,
+                                       N_("PORT"),
+                                       /*
+                                        * TRANSLATORS: GDB stub is a small 
part of
+                                        * GDB functionality running on local 
host
+                                        * which allows remote debugger to
+                                        * connect to it.
+                                        */
+                                       N_("Start GDB stub on given port"));
+  cmd_break = grub_register_command_lockdown ("gdbstub_break", 
grub_cmd_gdb_break,
+                                             /*
+                                              * TRANSLATORS: this refers to 
triggering
+                                              * a breakpoint so that the user 
will land
+                                              * into GDB.
+                                              */
+                                             0, N_("Break into GDB"));
+  cmd_stop = grub_register_command_lockdown ("gdbstub_stop", grub_cmd_gdbstop,
+                                            0, N_("Stop GDB stub"));
 }
 
 GRUB_MOD_FINI (gdb)
-- 
2.11.0


_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel

Reply via email to