On Wed, Jun 26, 2019 at 6:49 PM Daniel Axtens <[email protected]> wrote: > > Matthew Garrett <[email protected]> writes: > > + if (kp->flags & KERNEL_PARAM_FL_HWPARAM && > > + security_locked_down(LOCKDOWN_MODULE_PARAMETERS)) > > + return false; > > + return true; > > } > > Should this test occur before tainting the kernel?
Seems reasonable.
