]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
authorPeter Oberparleiter <oberpar@linux.ibm.com>
Thu, 21 Aug 2025 12:35:40 +0000 (14:35 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 28 Aug 2025 14:31:16 +0000 (16:31 +0200)
commit782a7d2ddbf2939432f4ffb9e9283bc190e100c7
tree0212317856629a5f601d7ed54c55fd857dc99a82
parentba1e8eab16d269ae4245b8eb7af2a90d83d6a0f3
s390/hypfs: Avoid unnecessary ioctl registration in debugfs

[ Upstream commit fec7bdfe7f8694a0c39e6c3ec026ff61ca1058b9 ]

Currently, hypfs registers ioctl callbacks for all debugfs files,
despite only one file requiring them. This leads to unintended exposure
of unused interfaces to user space and can trigger side effects such as
restricted access when kernel lockdown is enabled.

Restrict ioctl registration to only those files that implement ioctl
functionality to avoid interface clutter and unnecessary access
restrictions.

Tested-by: Mete Durlu <meted@linux.ibm.com>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Fixes: 5496197f9b08 ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Alexander Gordeev <agordeev@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
arch/s390/hypfs/hypfs_dbfs.c