Daniel Axtens 26db660503 fs/bfs: Disable under lockdown ...

The BFS is not fuzz-clean. Don't allow it to be loaded under lockdown.
This will also disable the AFS.

Fixes: CVE-2024-45778
Fixes: CVE-2024-45779

Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Daniel Axtens <dja@axtens.net>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2025-02-13 15:45:56 +01:00

..

boot

A workaround for clang problem assembling startup_raw.S

2019-04-08 15:22:10 +10:00

bus

build: Fix -Werror=array-bounds array subscript 0 is outside array bounds

2022-04-20 18:27:52 +02:00

commands

commands/hexdump: Disable memory reading in lockdown mode

2025-02-13 15:45:56 +01:00

disk

disk/loopback: Reference tracking for the loopback

2025-01-23 16:22:47 +01:00

efiemu

types: Split aligned and packed guids

2023-11-08 05:04:24 +01:00

font

font: Try opening fonts from the bundled memdisk

2023-05-16 18:51:12 +02:00

fs

fs/bfs: Disable under lockdown

2025-02-13 15:45:56 +01:00

gdb

misc: Spelling fixes

2023-01-19 17:39:04 +01:00

gettext

gettext: Integer overflow leads to heap OOB write

2025-02-13 15:45:56 +01:00

gfxmenu

gfxmenu/view: Resolve false grub_errno disrupting boot process

2024-04-11 15:48:25 +02:00

hello

* grub-core/commands/gptsync.c: Fix typographic quoting.

2012-03-03 13:05:08 +01:00

hook

* grub-core/hook/datehook.c (grub_read_hook_datetime): Small stylistic

2011-11-11 21:03:49 +01:00

io

io/gzio: Properly init a table

2024-06-06 16:55:15 +02:00

kern

kern/dl: Check for the SHF_INFO_LINK flag in grub_dl_relocate_symbols()

2025-02-13 15:45:55 +01:00

lib

ieee1275/tcg2: Add TCG2 driver for ieee1275 PowerPC firmware

2024-11-28 22:57:09 +01:00

loader

loader/multiboot: Do not add modules before successful download

2024-10-31 16:29:01 +01:00

mmap

efi: Drop all uses of efi_call_XX() wrappers

2023-05-25 16:48:00 +02:00

net

net/tftp: Fix stack buffer overflow in tftp_open()

2025-02-13 15:45:55 +01:00

normal

normal: Remove variables hooks on module unload

2025-02-13 15:45:55 +01:00

osdep

osdep/devmapper/getroot: Unmark 2 strings for translation

2024-06-20 19:14:41 +02:00

partmap

gpt: Add compile time asserts for guid and gpt_partentry sizes

2023-11-08 05:05:06 +01:00

parttool

types: Make bool generally available

2022-11-14 17:17:21 +01:00

script

script/execute: Limit the recursion depth

2025-01-23 16:22:47 +01:00

term

ieee1275: Consolidate repeated definitions of IEEE1275_IHANDLE_INVALID

2024-11-28 22:15:29 +01:00

tests

asn1_test: Test module for libtasn1

2024-11-28 21:50:54 +01:00

video

video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG

2025-02-13 15:45:55 +01:00

gdb_grub.in

gdb: Add extra early initialization symbols for i386-pc

2023-03-14 16:07:54 +01:00

gdb_helper.py.in

gdb: Modify gdb prompt when running gdb_grub script

2023-03-14 16:07:54 +01:00

genemuinit.sh

use MODULE_FILES for genemuinit* instead of MOD_FILES

2014-01-18 23:15:40 +04:00

genemuinitheader.sh

use MODULE_FILES for genemuinit* instead of MOD_FILES

2014-01-18 23:15:40 +04:00

genmod.sh.in

modules: Strip .llvm_addrsig sections and similar

2024-10-10 13:18:00 +02:00

genmoddep.awk

build: Track explicit module dependencies in Makefile.core.def

2024-05-09 15:04:54 +02:00

gensyminfo.sh.in

Fix shebang for termux.

2017-05-03 12:49:31 +02:00

gensymlist.sh

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

gentrigtables.c

* grub-core/gentrigtables.c: Make tables const.

2013-03-01 11:15:09 +01:00

Makefile.am

key_protector: Add key protectors framework

2024-11-28 21:50:55 +01:00

Makefile.core.def

tpm2_key_protector: Enable build for powerpc_ieee1275

2024-11-28 23:02:24 +01:00

modinfo.sh.in

Fix shebang for termux.

2017-05-03 12:49:31 +02:00