CONFIG_SECURITY_LOADPIN: Pin load of kernel files (modules, fw, etc) to one filesystem

General informations

The Linux kernel configuration item CONFIG_SECURITY_LOADPIN:

• prompt: Pin load of kernel files (modules, fw, etc) to one filesystem
• type: bool
• depends on: CONFIG_SECURITY && CONFIG_BLOCK
• defined in security/loadpin/Kconfig
• found in Linux kernels: 4.7–4.20, 5.0–5.19, 6.0–6.14, 6.15-rc+HEAD

Help text

Any files read through the kernel file reading interface (kernel modules, firmware, kexec images, security policy) can be pinned to the first filesystem used for loading. When enabled, any files that come from other filesystems will be rejected. This is best used on systems without an initrd that have a root filesystem backed by a read-only device such as dm-verity or a CDROM.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: