Peter Jones 05913989c8 efi: Make efivarfs entries immutable by default ... commit ed8b0de5a33d2a2557dce7f9429dca8cb5bc5879 upstream. "rm -rf" is bricking some peoples' laptops because of variables being used to store non-reinitializable firmware driver data that's required to POST the hardware. These are 100% bugs, and they need to be fixed, but in the mean time it shouldn't be easy to *accidentally* brick machines. We have to have delete working, and picking which variables do and don't work for deletion is quite intractable, so instead make everything immutable by default (except for a whitelist), and make tools that aren't quite so broad-spectrum unset the immutable flag. Signed-off-by: Peter Jones <pjones@redhat.com> Tested-by: Lee, Chun-Yi <jlee@suse.com> Acked-by: Matthew Garrett <mjg59@coreos.com> Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-03-03 15:07:09 -08:00
..
accessibility
acpi	ACPI / property: avoid leaking format string into kobject name	2016-01-08 01:01:41 +01:00
amba
android
ata	ahci: Intel DNV device IDs SATA	2016-02-17 12:31:03 -08:00
atm
auxdisplay
base	base/platform: Fix platform drivers with no probe callback	2016-02-17 12:30:55 -08:00
bcma
block	zram: don't call idr_remove() from zram_remove()	2016-02-17 12:31:06 -08:00
bluetooth	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-11-10 18:11:41 -08:00
bus	bus: sunxi-rsb: Fix peripheral IC mapping runtime address	2015-12-22 11:42:30 -08:00
cdrom
char	ipmi: move timer init to before irq is setup	2015-12-09 13:13:06 -06:00
clk	ARM: SoC fixes for 4.4-rc	2015-12-12 16:43:44 -08:00
clocksource	clocksource: Mmio: remove artificial 32bit limitation	2015-12-10 19:37:18 +01:00
connector	connector: bump skb->users before callback invocation	2016-01-04 21:46:45 -05:00
cpufreq	cpufreq: scpi-cpufreq: signedness bug in scpi_get_dvfs_info()	2015-12-24 02:11:37 +01:00
cpuidle
crypto	crypto: marvell/cesa - fix test in mv_cesa_dev_dma_init()	2016-02-17 12:31:05 -08:00
dca
devfreq
dio
dma	dmaengine: xgene-dma: Fix double IRQ issue by setting IRQ_DISABLE_UNLAZY flag	2016-01-07 11:09:36 +05:30
dma-buf	dma-buf/fence: add fence_wait_any_timeout function v2	2015-10-30 01:16:16 -04:00
edac	asm-generic cleanups	2015-11-06 14:22:15 -08:00
eisa
extcon
firewire	IEEE 1394 subsystem patch:	2015-11-11 10:21:34 -08:00
firmware	efi: Make efivarfs entries immutable by default	2016-03-03 15:07:09 -08:00
fmc
fpga	fpga manager: Fix firmware resource leak on error	2015-11-24 15:25:46 -08:00
gpio	gpio: revert get() to non-errorprogating behaviour	2015-12-17 15:48:29 +01:00
gpu	drm/gma500: Use correct unref in the gem bo create function	2016-03-03 15:07:08 -08:00
hid	HID: multitouch: fix input mode switching on some Elan panels	2016-02-17 12:31:06 -08:00
hsi	hsi: controllers:remove redundant code	2015-10-30 16:10:40 +01:00
hv	drivers/hv: share Hyper-V SynIC constants with userspace	2015-11-04 16:24:33 +01:00
hwmon	hwmon: (sht15) Select CONFIG_BITREVERSE	2015-12-18 08:19:52 -08:00
hwspinlock	drivers/hwspinlock: fix race between radix tree insertion and lookup	2016-02-25 12:01:23 -08:00
hwtracing	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending	2015-11-13 20:04:17 -08:00
i2c	i2c: rcar: disable runtime PM correctly in slave mode	2015-12-19 12:00:37 +01:00
ide	mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM	2015-11-06 17:50:42 -08:00
idle
iio	iio: inkern: fix a NULL dereference on error	2016-02-25 12:01:17 -08:00
infiniband	net/mlx5_core: Fix trimming down IRQ number	2016-01-31 11:29:01 -08:00
input	Input: vmmouse - fix absolute device registration	2016-02-25 12:01:21 -08:00
iommu	iommu/vt-d: Clear PPR bit to ensure we get more page request interrupts	2016-02-25 12:01:22 -08:00
ipack
irqchip	irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB	2015-12-01 22:50:16 +01:00
isdn	ser_gigaset: remove unnecessary kfree() calls from release method	2015-12-15 13:24:21 -05:00
leds	spi: Updates for v4.4	2015-11-05 13:15:12 -08:00
lguest
lightnvm	lightnvm: wrong offset in bad blk lun calculation	2015-12-29 08:28:32 -07:00
macintosh
mailbox	mailbox: mailbox-test: avoid reading iomem twice	2015-11-04 14:03:04 +05:30
mcb	mcb: Destroy IDA on module unload	2015-10-29 09:02:16 +09:00
md	md/raid: only permit hot-add of compatible integrity profiles	2016-02-17 12:30:57 -08:00
media	saa7134-alsa: Only frees registered sound cards	2016-02-17 12:31:00 -08:00
memory	fsl-ifc: add missing include on ARM64	2015-12-16 00:16:58 +01:00
memstick
message	SCSI queue for 4.4.	2015-11-12 07:06:18 -05:00
mfd	asm-generic cleanups	2015-11-06 14:22:15 -08:00
misc	cxl: Set endianess of kernel contexts	2015-12-08 16:57:01 +11:00
mmc	mmc: remove bondage between REQ_META and reliable write	2015-11-09 14:04:52 +01:00
mtd	mtd: nand: assign reasonable default name for NAND drivers	2016-02-17 12:30:56 -08:00
net	pppoe: fix reference counting in PPPoE proxy	2016-03-03 15:07:07 -08:00
nfc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-11-10 18:11:41 -08:00
ntb	NTB: fix 32-bit compiler warning	2015-11-08 16:24:43 -05:00
nubus
nvdimm	libnvdimm: fix namespace object confusion in is_uuid_busy()	2016-02-25 12:01:21 -08:00
nvme	NVMe: IO ending fixes on surprise removal	2015-12-22 10:12:04 -07:00
nvmem
of	of/irq: Export of_irq_find_parent again	2015-12-09 09:08:36 -06:00
oprofile
parisc	parisc iommu: fix panic due to trying to allocate too large region	2015-12-12 16:07:25 +01:00
parport
pci	PCI: Fix minimum allocation address overwrite	2016-02-17 12:30:56 -08:00
pcmcia
perf	arm64 updates for 4.4:	2015-11-04 14:47:13 -08:00
phy	phy: twl4030-usb: Fix unbalanced pm_runtime_enable on module reload	2016-02-25 12:01:14 -08:00
pinctrl	pinctrl: bcm2835: Fix initial value for direction_output	2015-12-14 11:31:20 +01:00
platform	intel_scu_ipcutil: underflow in scu_reg_access()	2016-02-25 12:01:23 -08:00
pnp
power	- New Device Support	2015-11-06 10:23:50 -08:00
powercap	powercap / RAPL: fix BIOS lock check	2015-12-12 02:31:11 +01:00
pps
ps3
ptp
pwm	pwm: Changes for v4.4-rc1	2015-11-11 09:16:10 -08:00
rapidio
ras
regulator	spi: Updates for v4.4	2015-11-05 13:15:12 -08:00
remoteproc	remoteproc: fix memory leak of remoteproc ida cache layers	2015-11-26 17:44:28 +02:00
reset
rpmsg
rtc	rtc: da9063: fix access ordering error during RTC interrupt at system power on	2015-12-20 13:39:29 +01:00
s390	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux	2015-12-22 15:43:18 -08:00
sbus
scsi	scsi: fix soft lockup in scsi_remove_target() on module removal	2016-02-25 12:01:17 -08:00
sfi
sh	drivers: sh: Get rid of CONFIG_ARCH_SHMOBILE_MULTI	2015-11-17 02:12:46 +09:00
sn
soc	Few Keystone fixes for 4.4-rcx	2015-11-25 23:48:12 +01:00
spi	Merge remote-tracking branches 'spi/fix/dspi' and 'spi/fix/spidev' into spi-linus	2015-12-16 13:28:32 +00:00
spmi	char/misc drivers for 4.4-rc1	2015-11-04 22:15:15 -08:00
ssb	ssb: add Kconfig entry for compiling SoC related code	2015-10-28 21:05:21 +02:00
staging	staging/speakup: Use tty_ldisc_ref() for paste kworker	2016-02-25 12:01:14 -08:00
target	iscsi-target: Fix potential dead-lock during node acl delete	2016-02-25 12:01:16 -08:00
tc
thermal	imx: thermal: use CPU temperature grade info for thresholds	2015-11-23 16:38:40 -08:00
thunderbolt
tty	serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)	2016-02-25 12:01:14 -08:00
uio
usb	xhci: Fix list corruption in urb dequeue at host removal	2016-02-25 12:01:22 -08:00
uwb	driver core update for 4.4-rc1	2015-11-04 21:50:37 -08:00
vfio	Revert: "vfio: Include No-IOMMU mode"	2015-12-04 08:38:42 -07:00
vhost	vhost: replace % with & on data path	2015-12-07 17:28:10 +02:00
video	OMAPDSS: fix timings for VENC to match what omapdrm expects	2015-12-09 12:57:13 +02:00
virt
virtio	virtio_ring: shadow available ring flags & index	2015-12-07 17:28:11 +02:00
vlynq
vme	char/misc drivers for 4.4-rc1	2015-11-04 22:15:15 -08:00
w1	power supply and reset changes for the v4.4 series	2015-11-05 12:28:15 -08:00
watchdog	watchdog: mtk_wdt: Use MODE_KEY when stopping the watchdog	2015-11-23 09:00:09 +01:00
xen	xen: bug fixes for 4.4-rc5	2015-12-18 12:24:52 -08:00
zorro
Kconfig	char/misc drivers for 4.4-rc1	2015-11-04 22:15:15 -08:00
Makefile	null_blk: register as a LightNVM device	2015-11-16 15:22:28 -07:00