aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2017-04-04 11:54:27 -0400
committerDavid Howells <dhowells@redhat.com>2017-04-20 07:02:32 -0400
commit88f06b76e462119cb694c3ff13d7d343c49d2569 (patch)
treef59fe922157c5d8135d9bf96834ffadb197c0230
parent9149ba1fc2276181c7f80969d349ea25a7f9fe1f (diff)
Annotate hardware config module parameters in drivers/scsi/
When the kernel is running in secure boot mode, we lock down the kernel to prevent userspace from modifying the running kernel image. Whilst this includes prohibiting access to things like /dev/mem, it must also prevent access by means of configuring driver modules in such a way as to cause a device to access or modify the kernel image. To this end, annotate module_param* statements that refer to hardware configuration and indicate for future reference what type of parameter they specify. The parameter parser in the core sees this information and can skip such parameters with an error message if the kernel is locked down. The module initialisation then runs as normal, but just sees whatever the default values for those parameters is. Note that we do still need to do the module initialisation because some drivers have viable defaults set in case parameters aren't specified and some drivers support automatic configuration (e.g. PNP or PCI) in addition to manually coded parameters. This patch annotates drivers in drivers/scsi/. Suggested-by: Alan Cox <gnomes@lxorguk.ukuu.org.uk> Signed-off-by: David Howells <dhowells@redhat.com> cc: "Juergen E. Fischer" <fischer@norbit.de> cc: "James E.J. Bottomley" <jejb@linux.vnet.ibm.com> cc: "Martin K. Petersen" <martin.petersen@oracle.com> cc: Dario Ballabio <ballabio_dario@emc.com> cc: Finn Thain <fthain@telegraphics.com.au> cc: Michael Schmitz <schmitzmic@gmail.com> cc: Achim Leubner <achim_leubner@adaptec.com> cc: linux-scsi@vger.kernel.org
-rw-r--r--drivers/scsi/aha152x.c4
-rw-r--r--drivers/scsi/aha1542.c2
-rw-r--r--drivers/scsi/g_NCR5380.c8
-rw-r--r--drivers/scsi/gdth.c2
-rw-r--r--drivers/scsi/qlogicfas.c4
5 files changed, 10 insertions, 10 deletions
diff --git a/drivers/scsi/aha152x.c b/drivers/scsi/aha152x.c
index f44d0487236e..ce5dc73d85bb 100644
--- a/drivers/scsi/aha152x.c
+++ b/drivers/scsi/aha152x.c
@@ -331,11 +331,11 @@ MODULE_LICENSE("GPL");
331#if !defined(PCMCIA) 331#if !defined(PCMCIA)
332#if defined(MODULE) 332#if defined(MODULE)
333static int io[] = {0, 0}; 333static int io[] = {0, 0};
334module_param_array(io, int, NULL, 0); 334module_param_hw_array(io, int, ioport, NULL, 0);
335MODULE_PARM_DESC(io,"base io address of controller"); 335MODULE_PARM_DESC(io,"base io address of controller");
336 336
337static int irq[] = {0, 0}; 337static int irq[] = {0, 0};
338module_param_array(irq, int, NULL, 0); 338module_param_hw_array(irq, int, irq, NULL, 0);
339MODULE_PARM_DESC(irq,"interrupt for controller"); 339MODULE_PARM_DESC(irq,"interrupt for controller");
340 340
341static int scsiid[] = {7, 7}; 341static int scsiid[] = {7, 7};
diff --git a/drivers/scsi/aha1542.c b/drivers/scsi/aha1542.c
index 7db448ec8beb..a23cc9ac5acd 100644
--- a/drivers/scsi/aha1542.c
+++ b/drivers/scsi/aha1542.c
@@ -31,7 +31,7 @@ module_param(isapnp, bool, 0);
31MODULE_PARM_DESC(isapnp, "enable PnP support (default=1)"); 31MODULE_PARM_DESC(isapnp, "enable PnP support (default=1)");
32 32
33static int io[MAXBOARDS] = { 0x330, 0x334, 0, 0 }; 33static int io[MAXBOARDS] = { 0x330, 0x334, 0, 0 };
34module_param_array(io, int, NULL, 0); 34module_param_hw_array(io, int, ioport, NULL, 0);
35MODULE_PARM_DESC(io, "base IO address of controller (0x130,0x134,0x230,0x234,0x330,0x334, default=0x330,0x334)"); 35MODULE_PARM_DESC(io, "base IO address of controller (0x130,0x134,0x230,0x234,0x330,0x334, default=0x330,0x334)");
36 36
37/* time AHA spends on the AT-bus during data transfer */ 37/* time AHA spends on the AT-bus during data transfer */
diff --git a/drivers/scsi/g_NCR5380.c b/drivers/scsi/g_NCR5380.c
index 67c8dac321ad..c34fc91ba486 100644
--- a/drivers/scsi/g_NCR5380.c
+++ b/drivers/scsi/g_NCR5380.c
@@ -85,8 +85,8 @@ static int ncr_53c400;
85static int ncr_53c400a; 85static int ncr_53c400a;
86static int dtc_3181e; 86static int dtc_3181e;
87static int hp_c2502; 87static int hp_c2502;
88module_param(ncr_irq, int, 0); 88module_param_hw(ncr_irq, int, irq, 0);
89module_param(ncr_addr, int, 0); 89module_param_hw(ncr_addr, int, ioport, 0);
90module_param(ncr_5380, int, 0); 90module_param(ncr_5380, int, 0);
91module_param(ncr_53c400, int, 0); 91module_param(ncr_53c400, int, 0);
92module_param(ncr_53c400a, int, 0); 92module_param(ncr_53c400a, int, 0);
@@ -94,11 +94,11 @@ module_param(dtc_3181e, int, 0);
94module_param(hp_c2502, int, 0); 94module_param(hp_c2502, int, 0);
95 95
96static int irq[] = { -1, -1, -1, -1, -1, -1, -1, -1 }; 96static int irq[] = { -1, -1, -1, -1, -1, -1, -1, -1 };
97module_param_array(irq, int, NULL, 0); 97module_param_hw_array(irq, int, irq, NULL, 0);
98MODULE_PARM_DESC(irq, "IRQ number(s) (0=none, 254=auto [default])"); 98MODULE_PARM_DESC(irq, "IRQ number(s) (0=none, 254=auto [default])");
99 99
100static int base[] = { 0, 0, 0, 0, 0, 0, 0, 0 }; 100static int base[] = { 0, 0, 0, 0, 0, 0, 0, 0 };
101module_param_array(base, int, NULL, 0); 101module_param_hw_array(base, int, ioport, NULL, 0);
102MODULE_PARM_DESC(base, "base address(es)"); 102MODULE_PARM_DESC(base, "base address(es)");
103 103
104static int card[] = { -1, -1, -1, -1, -1, -1, -1, -1 }; 104static int card[] = { -1, -1, -1, -1, -1, -1, -1, -1 };
diff --git a/drivers/scsi/gdth.c b/drivers/scsi/gdth.c
index d020a13646ae..facc7271f932 100644
--- a/drivers/scsi/gdth.c
+++ b/drivers/scsi/gdth.c
@@ -353,7 +353,7 @@ static int probe_eisa_isa = 0;
353static int force_dma32 = 0; 353static int force_dma32 = 0;
354 354
355/* parameters for modprobe/insmod */ 355/* parameters for modprobe/insmod */
356module_param_array(irq, int, NULL, 0); 356module_param_hw_array(irq, int, irq, NULL, 0);
357module_param(disable, int, 0); 357module_param(disable, int, 0);
358module_param(reserve_mode, int, 0); 358module_param(reserve_mode, int, 0);
359module_param_array(reserve_list, int, NULL, 0); 359module_param_array(reserve_list, int, NULL, 0);
diff --git a/drivers/scsi/qlogicfas.c b/drivers/scsi/qlogicfas.c
index 61cac87fb86f..840823b99e51 100644
--- a/drivers/scsi/qlogicfas.c
+++ b/drivers/scsi/qlogicfas.c
@@ -137,8 +137,8 @@ err:
137static struct qlogicfas408_priv *cards; 137static struct qlogicfas408_priv *cards;
138static int iobase[MAX_QLOGICFAS]; 138static int iobase[MAX_QLOGICFAS];
139static int irq[MAX_QLOGICFAS] = { [0 ... MAX_QLOGICFAS-1] = -1 }; 139static int irq[MAX_QLOGICFAS] = { [0 ... MAX_QLOGICFAS-1] = -1 };
140module_param_array(iobase, int, NULL, 0); 140module_param_hw_array(iobase, int, ioport, NULL, 0);
141module_param_array(irq, int, NULL, 0); 141module_param_hw_array(irq, int, irq, NULL, 0);
142MODULE_PARM_DESC(iobase, "I/O address"); 142MODULE_PARM_DESC(iobase, "I/O address");
143MODULE_PARM_DESC(irq, "IRQ"); 143MODULE_PARM_DESC(irq, "IRQ");
144 144